Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

Project Subscriptions

Vendors Products
Unitronics Subscribe
Samba 3.5 Subscribe
Samba 3.5 Firmware Subscribe
Samba 4.3 Subscribe
Samba 4.3 Firmware Subscribe
Samba 7 Subscribe
Samba 7 Firmware Subscribe
Visilogic Subscribe
Vision1040 Subscribe
Vision1040 Firmware Subscribe
Vision120 Subscribe
Vision120 Firmware Subscribe
Vision1210 Subscribe
Vision1210 Firmware Subscribe
Vision130 Subscribe
Vision130 Firmware Subscribe
Vision230 Subscribe
Vision230 Firmware Subscribe
Vision280 Subscribe
Vision280 Firmware Subscribe
Vision290 Subscribe
Vision290 Firmware Subscribe
Vision350 Subscribe
Vision350 Firmware Subscribe
Vision430 Subscribe
Vision430 Firmware Subscribe
Vision530 Subscribe
Vision530 Firmware Subscribe
Vision560 Subscribe
Vision560 Firmware Subscribe
Vision570 Subscribe
Vision570 Firmware Subscribe
Vision700 Subscribe
Vision700 Firmware Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 21 Oct 2025 23:15:00 +0000


Tue, 21 Oct 2025 20:30:00 +0000


Tue, 21 Oct 2025 19:30:00 +0000


Wed, 30 Jul 2025 02:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.10289}

epss

{'score': 0.10538}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisa-cg

Published:

Updated: 2025-10-21T23:05:30.290Z

Reserved: 2023-11-30T18:40:51.463Z

Link: CVE-2023-6448

cve-icon Vulnrichment

Updated: 2024-08-02T08:28:21.839Z

cve-icon NVD

Status : Analyzed

Published: 2023-12-05T18:15:12.643

Modified: 2025-11-03T18:55:17.800

Link: CVE-2023-6448

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses