What’s Vulnerable › Vulnerabilities

CVE-2023-2003: Embedded malicious code vulnerability in Unitronics Vision1210

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-07-13 · updated 2026-06-17
• Weakness: CWE-506

Description

Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device.

Affected products

• Unitronics Vision1210: 4.3-build_5

References

• https://www.hackplayers.com/2023/07/vulnerabilidad-vision1210-unitronics.html
• https://www.incibe.es/en/incibe-cert/notices/aviso-sci/embedded-malicious-code-vulnerability-unitronics-vision1210
• https://www.hackplayers.com/2023/07/vulnerabilidad-vision1210-unitronics.html
• https://www.incibe.es/en/incibe-cert/notices/aviso-sci/embedded-malicious-code-vulnerability-unitronics-vision1210

Get alerted when CVE-2023-2003 or the next vulnerability affects your stack