Description
Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.
Published: 2023-12-05
Score: 9.8 Critical
EPSS: 13.3% Moderate
KEV: Yes
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 25 Feb 2026 17:30:00 +0000

Type Values Removed Values Added
Description Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system. Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

Tue, 21 Oct 2025 23:15:00 +0000


Tue, 21 Oct 2025 20:30:00 +0000


Tue, 21 Oct 2025 19:30:00 +0000


Wed, 30 Jul 2025 02:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.10289}

epss

{'score': 0.10538}


Subscriptions

Unitronics Samba 3.5 Samba 3.5 Firmware Samba 4.3 Samba 4.3 Firmware Samba 7 Samba 7 Firmware Visilogic Vision1040 Vision1040 Firmware Vision120 Vision120 Firmware Vision1210 Vision1210 Firmware Vision130 Vision130 Firmware Vision230 Vision230 Firmware Vision280 Vision280 Firmware Vision290 Vision290 Firmware Vision350 Vision350 Firmware Vision430 Vision430 Firmware Vision530 Vision530 Firmware Vision560 Vision560 Firmware Vision570 Vision570 Firmware Vision700 Vision700 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: cisa-cg

Published:

Updated: 2025-10-21T23:05:30.290Z

Reserved: 2023-11-30T18:40:51.463Z

Link: CVE-2023-6448

cve-icon Vulnrichment

Updated: 2024-08-02T08:28:21.839Z

cve-icon NVD

Status : Analyzed

Published: 2023-12-05T18:15:12.643

Modified: 2026-02-26T15:04:11.377

Link: CVE-2023-6448

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses