The vulnerability is an improper authentication flaw in Unitronics UniLogic and UniStream Pro, allowing an attacker to bypass legitimate credentials and gain unauthorized access to the system. The weakness is a classic authentication bypass (CWE‑287), potentially exposing sensitive control functions and data. The impact is therefore elevated risk of unauthorized control, data disclosure, and service disruption.

Unitronics UniStream Pro (B10 / C10) and UniLogic with versions before 1.41.329 are affected. The flaw exists in the authentication component used by both products for remote and local access.

The CVSS score of 8.3 indicates serious severity. The EPSS score is below 1%, suggesting a low probability of immediate exploitation, and the vulnerability is not listed in CISA KEV. The likely attack vector is remote, where an adversary can attempt unauthenticated connections to the device. If successful, the attacker could establish privileged access, control the device, or exfiltrate information. The flaw does not require physical access, making it largely remote and potentially automated.