CVE-2026-45451: Unitronics - CWE-287: Improper Authentication
: Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.
This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Unitronics UniStream Pro/UniLogicto a version that resolves this vulnerability.Fixed in 1.42.220
Event History
Frequently Asked Questions
Which deployments are affected?
The issue affects Unitronics UniStream Pro B10 and C10 systems using UniLogic versions earlier than 1.41.329.
What level of access does an attacker need?
The supplied CVSS vector indicates network access is possible with low attack complexity, but the attacker must already have low privileges. No user interaction is required.
What is the potential impact if exploited?
The CVSS vector rates confidentiality and integrity impact as high, with low availability impact. The overall severity is high, with a score of 8.3.
What version should be used to remediate the issue?
Update affected UniLogic installations to version 1.41.329 or later. Versions prior to 1.41.329 are identified as affected.