Vendor profile
Unitronics
A single Unitronics unit is usually the entire control system at a small site: controller, operator screen and remote-access endpoint in one box, often at a pump station or lift station reached over a cellular router. There is rarely a Level 3 or a DMZ — the device tends to sit one NAT rule away from the internet, which is exactly the condition CISA documented at US water utilities in 2023.
All-in-one PLC + HMISmall water and wastewater sitesOEM machine control
Integrated PLC + HMI
Vision series (V130, V350, V570, V1210)Samba series (SM35, SM43, SM70)UniStream series (UniStream 5/7/10, UniStream Modular)
Compact PLC
Jazz seriesM91 series (legacy)
Software
VisiLogic (Vision / Samba)UniLogic (UniStream)Remote Operator / Remote AccessUniCloud
I/O and expansion
I/O expansion modulesUniStream Uni-I/O and Uni-COM modules
Defensive considerations
- Remove the controller from direct internet exposure — no port forward of 20256/TCP, 20257/TCP or 5900/TCP, and no default-route cellular exposure
- Change the device password from the factory default (historically 1111) and use a unique value per site, recorded in a password manager
- Disable or firewall the embedded VNC server; if remote screen access is required, put it behind a VPN with multi-factor authentication
- Change the default PCOM port only as a supplementary measure — it is obfuscation, not a control
- Keep VisiLogic / UniLogic and controller firmware current, and hold a signed copy of each site's program offline for restoration
- Enable and forward controller and remote-access logs where the model supports it; most small utilities have no other OT telemetry
- Back up the program and the HMI screens for every site, and test restoring to a spare unit
- Document and drill manual operation of each site so a defaced or unavailable HMI does not stop the process
- Scan your own public address ranges (and cellular APN ranges) for 20256/TCP as a recurring control, not a one-off project
At a glance
HeadquartersIsrael (Airport City)
Protocolspcom, modbus-tcp, modbus-rtu, can, canopen, mqtt
IndustriesWater / Wastewater, Manufacturing, Food & Beverage, Building Automation
Sources & further reading
This website is an independent educational and defensive cybersecurity resource and is not affiliated with the vendors referenced within it.