CVE-2023-6448
Unitronics Vision PLC and HMI Insecure Default Password Vulnerability
Why this priority
?
Generic watch priority computed by public, versioned rules. It does not know your assets. See the glossary
- Présent dans le catalogue CISA KEV (exploitation confirmée)
Description
Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Unitronics | Vision PLC and HMI | All versions |
Revision history
Revision 2
Revision 1
New record
Qualification
- CVSS severity
?
Technical severity score between 0 and 10, with its version (3.1, 4.0). See the glossary
- No published score
- KEV catalog
?
CISA catalog of vulnerabilities with confirmed exploitation. Absence from the catalog does not prove absence of exploitation. See the glossary
- Listed
- Exploitation
- Confirmed
- EPSS probability
?
Probability, between 0 and 1, that a vulnerability is exploited in the next 30 days, published daily by FIRST. Always dated. See the glossary
- Unknown
- Confidence
?
Quality of the sources behind the record. It is not a risk score. See the glossary
- Medium
Priority rules, version 1
CISA KEV catalog
- Added on
- 11 December 2023
- Federal due date
- 18 December 2023
- Required action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Ransomware use
- Unknown
Record
- Weaknesses (CWE)
- CWE-1188
Sources
- Source : CISA Known Exploited Vulnerabilities Catalog Terms of use