CVE-2026-45450: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer in Unitronics Unitronics UniStream Pro/UniLogic

This vulnerability, classified as CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), affects Unitronics UniStream Pro versions B10 and C10, and UniLogic versions prior to 1.41.329. It allows operations that exceed memory buffer boundaries, potentially leading to memory corruption. The CVSS 3.1 base score is 8.3, indicating a high severity with network attack vector, low attack complexity, requiring low privileges and no user interaction. The impact includes high confidentiality and integrity loss, and low availability impact. No vendor advisory or patch information is available at this time.

The vulnerability can lead to unauthorized disclosure or modification of information (high confidentiality and integrity impact) and may cause limited disruption of service (low availability impact). Exploitation requires network access with low privileges and no user interaction, making it a significant risk in affected environments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to affected devices and monitor for unusual activity related to UniStream Pro and UniLogic software.