Secuno
ENNL
Book demo

CVE-2023-6448

Unitronics Vision PLC and HMI Insecure Default Password

9.8 CRITICALActively exploited (CISA KEV)EPSS 2.09%
  1. Published5 Dec 2023
  2. Added to CISA KEV11 Dec 2023
  3. Remediation due18 Dec 2023
Actively exploited (CISA KEV)

Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands.

Added to KEV: 11 Dec 2023Federal remediation due: 18 Dec 2023

Description

Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Unitronics Visilogic< 9.9.00
Unitronics Samba 3.5 Firmware< 12.38
Unitronics Samba 4.3 Firmware< 12.38
Unitronics Samba 7 Firmware< 12.38
Unitronics Vision1040 Firmware< 12.38
Unitronics Vision120 Firmware< 12.38
Unitronics Vision1210 Firmware< 12.38
Unitronics Vision130 Firmware< 12.38
Unitronics Vision230 Firmware< 12.38
Unitronics Vision280 Firmware< 12.38
Unitronics Vision290 Firmware< 12.38
Unitronics Vision350 Firmware< 12.38
Unitronics Vision430 Firmware< 12.38
Unitronics Vision530 Firmware< 12.38
Unitronics Vision560 Firmware< 12.38
Unitronics Vision570 Firmware< 12.38
Unitronics Vision700 Firmware< 12.38

Remediation

Fixed in
Unitronics Visilogic≥ 9.9.00
Unitronics Samba 3.5 Firmware≥ 12.38
Unitronics Samba 4.3 Firmware≥ 12.38
Unitronics Samba 7 Firmware≥ 12.38
Unitronics Vision1040 Firmware≥ 12.38
Unitronics Vision120 Firmware≥ 12.38
Unitronics Vision1210 Firmware≥ 12.38
Unitronics Vision130 Firmware≥ 12.38
Unitronics Vision230 Firmware≥ 12.38
Unitronics Vision280 Firmware≥ 12.38

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-1095698.8
sandboxed.sh through 1.3.0 contains a container escape vulnerability that allows code…
CVE-2026-1095669.8
Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability…
CVE-2026-1087539.4
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in…
CVE-2026-1052789.8
The published Docker image for openPDC includes a fixed administrative credential with…
CVE-2026-842508.4
IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection…
CVE-2026-622529.8
Homer is open source telecom observability software. Prior to version 11.0.283, on…

Frequently asked

Is CVE-2023-6448 being actively exploited?

Yes. CVE-2023-6448 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 11 Dec 2023.

How severe is CVE-2023-6448?

CVE-2023-6448 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 2.09% probability of exploitation.

Which products are affected by CVE-2023-6448?

Affected products include Unitronics Visilogic, Unitronics Samba 3.5 Firmware, Unitronics Samba 4.3 Firmware, Unitronics Samba 7 Firmware, Unitronics Vision1040 Firmware, and 12 more.

How do I fix CVE-2023-6448?

Upgrade affected software to a fixed version, for example Unitronics Visilogic 9.9.00, Unitronics Samba 3.5 Firmware 12.38, Unitronics Samba 4.3 Firmware 12.38 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2023-6448 against the real software inventory on every managed device, as each hourly inventory arrives. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, a risk for it never ranks below high, and the update that fixes it moves to the Emergency patch lane. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.