Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.
History

Wed, 30 Jul 2025 02:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.10289}

epss

{'score': 0.10538}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisa-cg

Published: 2023-12-05T17:43:40.451Z

Updated: 2025-07-30T01:37:10.634Z

Reserved: 2023-11-30T18:40:51.463Z

Link: CVE-2023-6448

cve-icon Vulnrichment

Updated: 2024-08-02T08:28:21.839Z

cve-icon NVD

Status : Analyzed

Published: 2023-12-05T18:15:12.643

Modified: 2025-01-27T21:52:49.177

Link: CVE-2023-6448

cve-icon Redhat

No data.