Read the docs

Unitronics

Records21All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

Unitronics records in CISA KEV
TI-2023-05916 Unitronics Vision PLC and HMI Insecure Default Password Vulnerability Priority CRITICAL 100KEV 2023-12-11

Components

Products in the NVD configurations · select one to filter the records
Unilogic 8 records MEDIUM Visilogic Oplc Ide 4 records MEDIUM Visilogic 2 records CRITICAL Vision1210 Firmware 2 records CRITICAL Samba 3.5 Firmware 1 record CRITICAL Samba 4.3 Firmware 1 record CRITICAL Samba 7 Firmware 1 record CRITICAL Vision1040 Firmware 1 record CRITICAL

Records

2 records in Vision1210 Firmware · all components

TI-2023-05916 CVE-2023-6448 · GHSA-3r8p-3x67-72v8

Unitronics VisiLogic uses a default administrative password

Priority CRITICAL 100KEV

Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02089 Published 2023-12-05 Fixed in 9.9.00 CWE-1188
TI-2023-01885 CVE-2023-2003 · GHSA-5746-cm3p-frrh

Embedded malicious code vulnerability in Unitronics Vision1210

Priority HIGH 82

Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM pro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00915 Published 2023-07-13 No fix listed CWE-506
Open these records in search →