CVE-2026-45450 - Vulnerability Details - OpenCVE

: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.

This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

Upgrade UniLogic and UniStream to version 1.42.220 or above

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0

History

Thu, 15 Oct 2026 18:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 15 Oct 2026 15:45:00 +0000

Type	Values Removed	Values Added
Description		: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
Title		Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Weaknesses		CWE-119
References		https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
Metrics		cvssV3_1 `{'score': 8.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: INCD

Published: 2026-10-15T15:21:41.203Z

Updated: 2026-10-15T18:01:17.303Z

Reserved: 2026-05-12T15:11:23.921Z

Link: CVE-2026-45450

Vulnrichment

Updated: 2026-10-15T18:01:11.979Z

NVD

Status : Received

Published: 2026-10-15T16:18:11.617

Modified: 2026-10-15T16:18:11.617

Link: CVE-2026-45450

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-119

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45450", "assignerOrgId": "a57ee1ae-c9c1-4f40-aa7b-cf10760fde3f", "state": "PUBLISHED", "assignerShortName": "INCD", "dateReserved": "2026-05-12T15:11:23.921Z", "datePublished": "2026-10-15T15:21:41.203Z", "dateUpdated": "2026-10-15T18:01:17.303Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a57ee1ae-c9c1-4f40-aa7b-cf10760fde3f", "shortName": "INCD", "dateUpdated": "2026-10-15T15:21:41.203Z"}, "title": "Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer", "datePublic": "2026-10-15T15:13:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-119", "description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer", "type": "CWE"}]}], "affected": [{"vendor": "Unitronics", "product": "Unitronics UniStream Pro/UniLogic", "versions": [{"status": "affected", "version": "Unitronics UniStream Pro versions only (B10 / C10) \u2013 UniLogic versions prior to 1.41.329"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": ": Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.\n\nThis issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) \u2013 UniLogic versions prior to 1.41.329.", "supportingMedia": [{"type": "text/html", "base64": false, "value": ": Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.<p>This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) \u2013 UniLogic versions prior to 1.41.329.</p>"}]}], "references": [{"url": "https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "LOW", "baseSeverity": "HIGH", "baseScore": 8.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L"}}], "solutions": [{"lang": "en", "value": "Upgrade UniLogic and UniStream to version 1.42.220 or above", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<table>\n \n <tbody><tr>\n\n <td><table>\n \n <tbody><tr>\n\n <td>Upgrade UniLogic and UniStream to version 1.42.220 or above</td>\n\n </tr>\n</tbody></table></td></tr></tbody></table>"}]}], "credits": [{"lang": "en", "value": "SemanticGuard", "type": "finder"}], "source": {"advisory": "ILVN-2025-0262", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-15T18:00:51.546802Z", "id": "CVE-2026-45450", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T18:01:17.303Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45450", "assignerOrgId": "a57ee1ae-c9c1-4f40-aa7b-cf10760fde3f", "state": "PUBLISHED", "assignerShortName": "INCD", "dateReserved": "2026-05-12T15:11:23.921Z", "datePublished": "2026-10-15T15:21:41.203Z", "dateUpdated": "2026-10-15T18:01:17.303Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a57ee1ae-c9c1-4f40-aa7b-cf10760fde3f", "shortName": "INCD", "dateUpdated": "2026-10-15T15:21:41.203Z"}, "title": "Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer", "datePublic": "2026-10-15T15:13:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-119", "description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer", "type": "CWE"}]}], "affected": [{"vendor": "Unitronics", "product": "Unitronics UniStream Pro/UniLogic", "versions": [{"status": "affected", "version": "Unitronics UniStream Pro versions only (B10 / C10) \u2013 UniLogic versions prior to 1.41.329"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": ": Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.\n\nThis issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) \u2013 UniLogic versions prior to 1.41.329.", "supportingMedia": [{"type": "text/html", "base64": false, "value": ": Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.<p>This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) \u2013 UniLogic versions prior to 1.41.329.</p>"}]}], "references": [{"url": "https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "LOW", "baseSeverity": "HIGH", "baseScore": 8.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L"}}], "solutions": [{"lang": "en", "value": "Upgrade UniLogic and UniStream to version 1.42.220 or above", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<table>\n \n <tbody><tr>\n\n <td><table>\n \n <tbody><tr>\n\n <td>Upgrade UniLogic and UniStream to version 1.42.220 or above</td>\n\n </tr>\n</tbody></table></td></tr></tbody></table>"}]}], "credits": [{"lang": "en", "value": "SemanticGuard", "type": "finder"}], "source": {"advisory": "ILVN-2025-0262", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-45450", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-15T18:00:51.546802Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T18:01:11.979Z"}}]}}