Lucene search

9119a7d8-5eab-497f-8521-727c672e3725CVE-2023-6448

HistoryDec 05, 2023 - 6:15 p.m.

CVE-2023-6448

2023-12-0518:15:12

CWE-798

CWE-1188

9119a7d8-5eab-497f-8521-727c672e3725

web.nvd.nist.gov

177

In Wild

unitronics

vision series

plcs

hmis

default passwords

unauthorized access

cve-2023-6448

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.068 Low

EPSS

Percentile

93.9%

JSON

Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

Affected configurations

NVD

Node

unitronicsvision1210Match-

AND

unitronicsvision1210_firmwareMatch-

Node

unitronicsvision1040Match-

AND

unitronicsvision1040_firmwareMatch-

Node

unitronicsvision700Match-

AND

unitronicsvision700_firmwareMatch-

Node

unitronicsvision570Match-

AND

unitronicsvision570_firmwareMatch-

Node

unitronicsvision560Match-

AND

unitronicsvision560_firmwareMatch-

Node

unitronicsvision430Match-

AND

unitronicsvision430_firmwareMatch-

Node

unitronicsvision350Match-

AND

unitronicsvision350_firmwareMatch-

Node

unitronicsvision130_firmwareMatch-

AND

unitronicsvision130Match-

Node

unitronicsvision230_firmwareMatch-

AND

unitronicsvision230Match-

Node

unitronicsvision280_firmwareMatch-

AND

unitronicsvision280Match-

Node

unitronicsvision290_firmwareMatch-

AND

unitronicsvision290Match-

Node

unitronicsvision530_firmwareMatch-

AND

unitronicsvision530Match-

Node

unitronicsvision120_firmwareMatch-

AND

unitronicsvision120Match-

CPENameOperatorVersion
unitronics:vision1210_firmwareunitronics vision1210 firmwareeq-

CPE	Name	Operator	Version
unitronics:vision1210_firmware	unitronics vision1210 firmware	eq	-

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "product": "VisiLogic",
    "vendor": "Unitronics",
    "versions": [
      {
        "lessThan": "9.9.00",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]