Skip to content
OpenAdvisories
Critical 1 exploited CVE ICSA-23-348-15 1 CVE

Unitronics Vision and Samba Series (Update A)

Published Dec 14, 2023 · Updated Jan 4, 2024 · Revision 2

Vendor: Unitronics Product: OS Product: VisiLogic

Summary

Successful exploitation of this vulnerability could allow an unauthenticated attacker to take administrative control of Unitronics Vision and Samba series systems and use a default administrative password.

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-6448 Exploited

    Unitronics VisiLogic uses a default administrative password

    Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

    Unitronics VisiLogic
    KEV Dec 11, 2023

Revision history

  1. #2

    Update A - Added additional equipment, product, mitigations, and a link to the Unitronics advisory. Adjusted risk evaluation statement.

  2. #1

    Initial Publication

References