9.8

CVE-2023-6448

Warnung

Unitronics VisiLogic uses a default administrative password

Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Unitronics ≫ Vision1210 Firmware Version < 12.38
   Unitronics ≫ Vision1210 Version -
Unitronics ≫ Vision1040 Firmware Version < 12.38
   Unitronics ≫ Vision1040 Version -
Unitronics ≫ Vision700 Firmware Version < 12.38
   Unitronics ≫ Vision700 Version -
Unitronics ≫ Vision570 Firmware Version < 12.38
   Unitronics ≫ Vision570 Version -
Unitronics ≫ Vision560 Firmware Version < 12.38
   Unitronics ≫ Vision560 Version -
Unitronics ≫ Vision430 Firmware Version < 12.38
   Unitronics ≫ Vision430 Version -
Unitronics ≫ Vision350 Firmware Version < 12.38
   Unitronics ≫ Vision350 Version -
Unitronics ≫ Vision130 Firmware Version < 12.38
   Unitronics ≫ Vision130 Version -
Unitronics ≫ Vision230 Firmware Version < 12.38
   Unitronics ≫ Vision230 Version -
Unitronics ≫ Vision280 Firmware Version < 12.38
   Unitronics ≫ Vision280 Version -
Unitronics ≫ Vision290 Firmware Version < 12.38
   Unitronics ≫ Vision290 Version -
Unitronics ≫ Vision530 Firmware Version < 12.38
   Unitronics ≫ Vision530 Version -
Unitronics ≫ Vision120 Firmware Version < 12.38
   Unitronics ≫ Vision120 Version -
Unitronics ≫ Visilogic Version < 9.9.00
Unitronics ≫ Samba 3.5 Firmware Version < 12.38
   Unitronics ≫ Samba 3.5 Version -
Unitronics ≫ Samba 4.3 Firmware Version < 12.38
   Unitronics ≫ Samba 4.3 Version -
Unitronics ≫ Samba 7 Firmware Version < 12.38
   Unitronics ≫ Samba 7 Version -

11.12.2023: CISA Known Exploited Vulnerabilities (KEV) Catalog

Unitronics Vision PLC and HMI Insecure Default Password Vulnerability

Schwachstelle

Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands.

Beschreibung

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.09% 0.792
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cisa-cg 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-1188 Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.

CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf
Vendor Advisory
https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf
Release Notes
https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems
Third Party Advisory
US Government Resource
https://www.unitronicsplc.com/cyber_security_vision-samba/
Product
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6448
US Government Resource