What’s Vulnerable › Vulnerabilities

CVE-2023-6448: Unitronics Vision PLC and HMI Insecure Default Password Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2023-12-11
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-05 · updated 2026-06-17
• Weakness: CWE-1188

Description

Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

Affected products

• Unitronics Samba 3.5 Firmware: before 12.38 — fixed in 12.38
• Unitronics Samba 4.3 Firmware: before 12.38 — fixed in 12.38
• Unitronics Samba 7 Firmware: before 12.38 — fixed in 12.38
• Unitronics VisiLogic: before 9.9.00 — fixed in 9.9.00
• Unitronics Vision1040 Firmware: before 12.38 — fixed in 12.38
• Unitronics Vision120 Firmware: before 12.38 — fixed in 12.38
• Unitronics Vision1210: before 12.38 — fixed in 12.38
• Unitronics Vision130 Firmware: before 12.38 — fixed in 12.38
• Unitronics Vision230 Firmware: before 12.38 — fixed in 12.38
• Unitronics Vision280 Firmware: before 12.38 — fixed in 12.38
• Unitronics Vision290 Firmware: before 12.38 — fixed in 12.38
• Unitronics Vision350 Firmware: before 12.38 — fixed in 12.38
• Unitronics Vision430 Firmware: before 12.38 — fixed in 12.38
• Unitronics Vision530 Firmware: before 12.38 — fixed in 12.38
• Unitronics Vision560 Firmware: before 12.38 — fixed in 12.38
• Unitronics Vision570 Firmware: before 12.38 — fixed in 12.38
• Unitronics Vision700 Firmware: before 12.38 — fixed in 12.38

How to fix

Upgrade to a fixed version: Unitronics Samba 3.5 Firmware 12.38; Unitronics Samba 4.3 Firmware 12.38; Unitronics Samba 7 Firmware 12.38; Unitronics VisiLogic 9.9.00; Unitronics Vision1040 Firmware 12.38; Unitronics Vision120 Firmware 12.38; Unitronics Vision1210 12.38; Unitronics Vision130 Firmware 12.38; Unitronics Vision230 Firmware 12.38; Unitronics Vision280 Firmware 12.38; Unitronics Vision290 Firmware 12.38; Unitronics Vision350 Firmware 12.38. Check the vendor advisory for mitigations.

References

• https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf
• https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf
• https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems
• https://www.unitronicsplc.com/cyber_security_vision-samba/
• https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf
• https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf
• https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems
• https://www.unitronicsplc.com/cyber_security_vision-samba/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6448

Get alerted when CVE-2023-6448 or the next vulnerability affects your stack