Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 22 Oct 2025 08:15:00 +0900


Wed, 22 Oct 2025 05:30:00 +0900


Wed, 22 Oct 2025 04:30:00 +0900


Wed, 30 Jul 2025 11:15:00 +0900

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 16 Jul 2025 22:45:00 +0900

Type Values Removed Values Added
Metrics epss

{'score': 0.10289}

epss

{'score': 0.10538}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisa-cg

Published:

Updated: 2025-10-21T23:05:30.290Z

Reserved: 2023-11-30T18:40:51.463Z

Link: CVE-2023-6448

cve-icon Vulnrichment

Updated: 2024-08-02T08:28:21.839Z

cve-icon NVD

Status : Analyzed

Published: 2023-12-05T18:15:12.643

Modified: 2025-11-03T18:55:17.800

Link: CVE-2023-6448

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses