PatchTheCVE: unitronicshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-38435: Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of servhttps://patchthecve.com/cve/CVE-2024-38435.htmlhttps://patchthecve.com/cve/CVE-2024-38435.htmlWed, 17 Jun 2026 07:40:16 +0000MEDIUM 6.5: Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of serviceCVE-2024-27774: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow dhttps://patchthecve.com/cve/CVE-2024-27774.htmlhttps://patchthecve.com/cve/CVE-2024-27774.htmlWed, 17 Jun 2026 07:20:16 +0000HIGH 7.5: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow disclosing Sensitive Information Embedded inside Device's Firmware CVE-2024-27773: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow Rhttps://patchthecve.com/cve/CVE-2024-27773.htmlhttps://patchthecve.com/cve/CVE-2024-27773.htmlWed, 17 Jun 2026 07:20:16 +0000HIGH 8.8: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE CVE-2024-27772: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE https://patchthecve.com/cve/CVE-2024-27772.htmlhttps://patchthecve.com/cve/CVE-2024-27772.htmlWed, 17 Jun 2026 07:20:16 +0000HIGH 8.8: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE CVE-2024-27771: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE https://patchthecve.com/cve/CVE-2024-27771.htmlhttps://patchthecve.com/cve/CVE-2024-27771.htmlWed, 17 Jun 2026 07:20:16 +0000HIGH 8.8: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE CVE-2024-27770: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal https://patchthecve.com/cve/CVE-2024-27770.htmlhttps://patchthecve.com/cve/CVE-2024-27770.htmlWed, 17 Jun 2026 07:20:15 +0000HIGH 8.8: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal CVE-2024-27769: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to https://patchthecve.com/cve/CVE-2024-27769.htmlhttps://patchthecve.com/cve/CVE-2024-27769.htmlWed, 17 Jun 2026 07:20:15 +0000HIGH 8.8: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor may allow Taking Ownership Over Devices CVE-2024-27768: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE https://patchthecve.com/cve/CVE-2024-27768.htmlhttps://patchthecve.com/cve/CVE-2024-27768.htmlWed, 17 Jun 2026 07:20:15 +0000CRITICAL 9.8: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE CVE-2024-27767: CWE-287: Improper Authentication may allow Authentication Bypass https://patchthecve.com/cve/CVE-2024-27767.htmlhttps://patchthecve.com/cve/CVE-2024-27767.htmlWed, 17 Jun 2026 07:20:15 +0000CRITICAL 10.0: CWE-287: Improper Authentication may allow Authentication Bypass CVE-2023-6448: Unitronics Vision PLC and HMI Insecure Default Password Vulnerabilityhttps://patchthecve.com/cve/CVE-2023-6448.htmlhttps://patchthecve.com/cve/CVE-2023-6448.htmlWed, 17 Jun 2026 06:50:46 +0000CRITICAL 9.8: Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.