CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-6448

Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.105

EPSS Ranking 92.9%

CVSS Severity

CVSS v3 Score 9.8

Proposed Action

Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands.

Ransomware Campaign

Unknown

References

Products affected by CVE-2023-6448

Unitronics » Visilogic » Version: Any

cpe:2.3:a:unitronics:visilogic:*
Unitronics » Samba 3.5 » Version: N/A

cpe:2.3:h:unitronics:samba_3.5:-
Unitronics » Samba 4.3 » Version: N/A

cpe:2.3:h:unitronics:samba_4.3:-
Unitronics » Samba 7 » Version: N/A

cpe:2.3:h:unitronics:samba_7:-
Unitronics » Vision1040 » Version: N/A

cpe:2.3:h:unitronics:vision1040:-
Unitronics » Vision120 » Version: N/A

cpe:2.3:h:unitronics:vision120:-
Unitronics » Vision1210 » Version: N/A

cpe:2.3:h:unitronics:vision1210:-
Unitronics » Vision130 » Version: N/A

cpe:2.3:h:unitronics:vision130:-
Unitronics » Vision230 » Version: N/A

cpe:2.3:h:unitronics:vision230:-
Unitronics » Vision280 » Version: N/A

cpe:2.3:h:unitronics:vision280:-
Unitronics » Vision290 » Version: N/A

cpe:2.3:h:unitronics:vision290:-
Unitronics » Vision350 » Version: N/A

cpe:2.3:h:unitronics:vision350:-
Unitronics » Vision430 » Version: N/A

cpe:2.3:h:unitronics:vision430:-
Unitronics » Vision530 » Version: N/A

cpe:2.3:h:unitronics:vision530:-
Unitronics » Vision560 » Version: N/A

cpe:2.3:h:unitronics:vision560:-
Unitronics » Vision570 » Version: N/A

cpe:2.3:h:unitronics:vision570:-
Unitronics » Vision700 » Version: N/A

cpe:2.3:h:unitronics:vision700:-
Unitronics » Samba 3.5 Firmware » Version: N/A

cpe:2.3:o:unitronics:samba_3.5_firmware:-
Unitronics » Samba 4.3 Firmware » Version: N/A

cpe:2.3:o:unitronics:samba_4.3_firmware:-
Unitronics » Samba 7 Firmware » Version: N/A

cpe:2.3:o:unitronics:samba_7_firmware:-
Unitronics » Vision1040 Firmware » Version: N/A

cpe:2.3:o:unitronics:vision1040_firmware:-
Unitronics » Vision120 Firmware » Version: N/A

cpe:2.3:o:unitronics:vision120_firmware:-
Unitronics » Vision1210 Firmware » Version: N/A

cpe:2.3:o:unitronics:vision1210_firmware:-
Unitronics » Vision130 Firmware » Version: N/A

cpe:2.3:o:unitronics:vision130_firmware:-
Unitronics » Vision230 Firmware » Version: N/A

cpe:2.3:o:unitronics:vision230_firmware:-
Unitronics » Vision280 Firmware » Version: N/A

cpe:2.3:o:unitronics:vision280_firmware:-
Unitronics » Vision290 Firmware » Version: N/A

cpe:2.3:o:unitronics:vision290_firmware:-
Unitronics » Vision350 Firmware » Version: N/A

cpe:2.3:o:unitronics:vision350_firmware:-
Unitronics » Vision430 Firmware » Version: N/A

cpe:2.3:o:unitronics:vision430_firmware:-
Unitronics » Vision530 Firmware » Version: N/A

cpe:2.3:o:unitronics:vision530_firmware:-
Unitronics » Vision560 Firmware » Version: N/A

cpe:2.3:o:unitronics:vision560_firmware:-
Unitronics » Vision570 Firmware » Version: N/A

cpe:2.3:o:unitronics:vision570_firmware:-
Unitronics » Vision700 Firmware » Version: N/A

cpe:2.3:o:unitronics:vision700_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-6448

Products

Pricing

Contact Us