CVE-2023-6448

Unitronics Vision Series PLCs and HMIs use default administrative passwords. An unauthenticated attacker with network access to a PLC or HMI can take administrative control of the system.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf	Vendor Advisory
https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf	Release Notes
https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems	Third Party Advisory US Government Resource
https://www.unitronicsplc.com/cyber_security_vision-samba/	Product
https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf	Vendor Advisory
https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf	Release Notes
https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems	Third Party Advisory US Government Resource
https://www.unitronicsplc.com/cyber_security_vision-samba/	Product

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:unitronics:vision1210_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:vision1210:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:unitronics:vision1040_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:vision1040:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:unitronics:vision700_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:vision700:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:unitronics:vision570_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:vision570:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:unitronics:vision560_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:vision560:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:unitronics:vision430_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:vision430:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:unitronics:vision350_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:vision350:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:unitronics:vision130_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:vision130:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:unitronics:vision230_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:vision230:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND

cpe:2.3:o:unitronics:vision280_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:vision280:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND

cpe:2.3:o:unitronics:vision290_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:vision290:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND

cpe:2.3:o:unitronics:vision530_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:vision530:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND

cpe:2.3:o:unitronics:vision120_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:vision120:-:*:*:*:*:*:*:*

Configuration 14 (hide)

cpe:2.3:a:unitronics:visilogic:*:*:*:*:*:*:*:*

Configuration 15 (hide)

AND

cpe:2.3:o:unitronics:samba_3.5_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:samba_3.5:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND

cpe:2.3:o:unitronics:samba_4.3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:samba_4.3:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND

cpe:2.3:o:unitronics:samba_7_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:unitronics:samba_7:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:43

Type	Values Removed	Values Added
References	~~() https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf - Vendor Advisory~~	() https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf - Vendor Advisory
References	~~() https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf - Release Notes~~	() https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf - Release Notes
References	~~() https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems - Third Party Advisory, US Government Resource~~	() https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems - Third Party Advisory, US Government Resource
References	~~() https://www.unitronicsplc.com/cyber_security_vision-samba/ - Product~~	() https://www.unitronicsplc.com/cyber_security_vision-samba/ - Product

26 Jun 2024, 19:59

Type	Values Removed	Values Added
First Time		Unitronics samba 3.5 Unitronics visilogic Unitronics samba 4.3 Firmware Unitronics samba 7 Unitronics samba 4.3 Unitronics samba 7 Firmware Unitronics samba 3.5 Firmware
CPE	cpe:2.3:o:unitronics:vision130_firmware:-:::::::* cpe:2.3:o:unitronics:vision350_firmware:-:::::::* cpe:2.3:o:unitronics:vision230_firmware:-:::::::* cpe:2.3:o:unitronics:vision1040_firmware:-:::::::* cpe:2.3:o:unitronics:vision1210_firmware:-:::::::* cpe:2.3:o:unitronics:vision430_firmware:-:::::::* cpe:2.3:o:unitronics:vision280_firmware:-:::::::* cpe:2.3:o:unitronics:vision290_firmware:-:::::::* cpe:2.3:o:unitronics:vision700_firmware:-:::::::* cpe:2.3:o:unitronics:vision530_firmware:-:::::::* cpe:2.3:o:unitronics:vision120_firmware:-:::::::* cpe:2.3:o:unitronics:vision560_firmware:-:::::::* cpe:2.3:o:unitronics:vision570_firmware:-:::::::*	cpe:2.3:o:unitronics:vision230_firmware:::::::: cpe:2.3:o:unitronics:vision130_firmware:::::::: cpe:2.3:o:unitronics:vision120_firmware:::::::: cpe:2.3:o:unitronics:samba_7_firmware:::::::: cpe:2.3:o:unitronics:vision1040_firmware:::::::: cpe:2.3:o:unitronics:vision280_firmware:::::::: cpe:2.3:o:unitronics:vision530_firmware:::::::: cpe:2.3:o:unitronics:samba_4.3_firmware:::::::: cpe:2.3:o:unitronics:vision1210_firmware:::::::: cpe:2.3:o:unitronics:vision560_firmware:::::::: cpe:2.3:o:unitronics:vision700_firmware:::::::: cpe:2.3:o:unitronics:vision570_firmware:::::::: cpe:2.3:h:unitronics:samba_3.5:-:::::::* cpe:2.3:h:unitronics:samba_7:-:::::::* cpe:2.3:o:unitronics:vision430_firmware:::::::: cpe:2.3:a:unitronics:visilogic:::::::: cpe:2.3:o:unitronics:vision290_firmware:::::::: cpe:2.3:o:unitronics:vision350_firmware:::::::: cpe:2.3:o:unitronics:samba_3.5_firmware:::::::: cpe:2.3:h:unitronics:samba_4.3:-:::::::*
References	~~() https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf -~~	() https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf - Vendor Advisory
References	~~() https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf -~~	() https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf - Release Notes
References	~~() https://www.unitronicsplc.com/cyber_security_vision-samba/ -~~	() https://www.unitronicsplc.com/cyber_security_vision-samba/ - Product

19 Dec 2023, 14:15

Type	Values Removed	Values Added
References		() https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf -

12 Dec 2023, 15:31

Type	Values Removed	Values Added
References	~~() https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems -~~	() https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems - Third Party Advisory, US Government Resource
CPE		cpe:2.3:h:unitronics:vision130:-:::::::* cpe:2.3:o:unitronics:vision130_firmware:-:::::::* cpe:2.3:o:unitronics:vision1040_firmware:-:::::::* cpe:2.3:o:unitronics:vision530_firmware:-:::::::* cpe:2.3:h:unitronics:vision530:-:::::::* cpe:2.3:h:unitronics:vision570:-:::::::* cpe:2.3:h:unitronics:vision430:-:::::::* cpe:2.3:h:unitronics:vision1040:-:::::::* cpe:2.3:h:unitronics:vision350:-:::::::* cpe:2.3:o:unitronics:vision280_firmware:-:::::::* cpe:2.3:h:unitronics:vision1210:-:::::::* cpe:2.3:o:unitronics:vision700_firmware:-:::::::* cpe:2.3:o:unitronics:vision1210_firmware:-:::::::* cpe:2.3:h:unitronics:vision280:-:::::::* cpe:2.3:o:unitronics:vision120_firmware:-:::::::* cpe:2.3:o:unitronics:vision350_firmware:-:::::::* cpe:2.3:o:unitronics:vision570_firmware:-:::::::* cpe:2.3:h:unitronics:vision700:-:::::::* cpe:2.3:h:unitronics:vision290:-:::::::* cpe:2.3:h:unitronics:vision120:-:::::::* cpe:2.3:h:unitronics:vision230:-:::::::* cpe:2.3:o:unitronics:vision560_firmware:-:::::::* cpe:2.3:h:unitronics:vision560:-:::::::* cpe:2.3:o:unitronics:vision290_firmware:-:::::::* cpe:2.3:o:unitronics:vision430_firmware:-:::::::* cpe:2.3:o:unitronics:vision230_firmware:-:::::::*
First Time		Unitronics vision560 Unitronics vision230 Firmware Unitronics Unitronics vision700 Firmware Unitronics vision230 Unitronics vision1210 Firmware Unitronics vision560 Firmware Unitronics vision120 Unitronics vision130 Unitronics vision570 Unitronics vision350 Firmware Unitronics vision1210 Unitronics vision700 Unitronics vision120 Firmware Unitronics vision1040 Unitronics vision1040 Firmware Unitronics vision280 Firmware Unitronics vision430 Firmware Unitronics vision530 Firmware Unitronics vision430 Unitronics vision350 Unitronics vision290 Unitronics vision570 Firmware Unitronics vision130 Firmware Unitronics vision530 Unitronics vision290 Firmware Unitronics vision280
CWE		CWE-798
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8

05 Dec 2023, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-12-05 18:15

Updated : 2025-01-27 21:52

NVD link : CVE-2023-6448

Mitre link : CVE-2023-6448

CVE.ORG link : CVE-2023-6448

JSON object : View

Products Affected

unitronics

vision280
vision280_firmware
samba_3.5
vision1040_firmware
vision530_firmware
vision120_firmware
vision350_firmware
vision570_firmware
vision570
vision1210_firmware
vision1210
vision430
samba_7
vision530
vision350
vision700_firmware
visilogic
vision430_firmware
vision130
vision290_firmware
vision290
samba_3.5_firmware
samba_4.3
vision560_firmware
samba_7_firmware
samba_4.3_firmware
vision560
vision120
vision130_firmware
vision230_firmware
vision1040
vision700
vision230

CWE

CWE-1188

Initialization of a Resource with an Insecure Default

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2023-6448", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "9119a7d8-5eab-497f-8521-727c672e3725", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-12-05T18:15:12.643", "references": [{"url": "https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf", "tags": ["Vendor Advisory"], "source": "9119a7d8-5eab-497f-8521-727c672e3725"}, {"url": "https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf", "tags": ["Release Notes"], "source": "9119a7d8-5eab-497f-8521-727c672e3725"}, {"url": "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems", "tags": ["Third Party Advisory", "US Government Resource"], "source": "9119a7d8-5eab-497f-8521-727c672e3725"}, {"url": "https://www.unitronicsplc.com/cyber_security_vision-samba/", "tags": ["Product"], "source": "9119a7d8-5eab-497f-8521-727c672e3725"}, {"url": "https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Version%20changes.pdf", "tags": ["Release Notes"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.unitronicsplc.com/cyber_security_vision-samba/", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "9119a7d8-5eab-497f-8521-727c672e3725", "description": [{"lang": "en", "value": "CWE-1188"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.\n"}, {"lang": "es", "value": "Los PLC y HMI de Unitronics Vision Series utilizan contrase\u00f1as administrativas predeterminadas. Un atacante no autenticado con acceso a la red de un PLC o HMI puede tomar el control administrativo del sistema."}], "lastModified": "2025-01-27T21:52:49.177", "cisaActionDue": "2023-12-18", "cisaExploitAdd": "2023-12-11", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:vision1210_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF1398A4-6BD7-48FF-8A65-7605DA38CE23", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:vision1210:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "32D6EFD3-61C3-4C4D-8B17-16591255EAE5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:vision1040_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7C3337B-E349-4303-B387-088978CC823C", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:vision1040:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C91F4803-BC61-491F-9561-ECF043253B04"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:vision700_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BABAB394-7C0B-47F4-9D64-A7DB457B8C16", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:vision700:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "38C892EC-1980-459E-9B1F-E9F0C703E758"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:vision570_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B92755D-CF8A-40BA-849D-5B04B6F389D2", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:vision570:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "017A743B-AB98-4931-B7D6-F1062529B947"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:vision560_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D5026C4-18D6-4E6D-8CFA-FFC0BD2A0BF1", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:vision560:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3E24B3A0-2FD9-4C13-9E89-F218B9CCED7C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:vision430_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0A743EA-B702-4E80-9130-C4A022540569", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:vision430:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0A078DEE-DB79-4E33-BF48-849D6A26F0FC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:vision350_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E442C02-4684-4A3C-AA8F-AC641CCA358C", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:vision350:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "406D6FA9-4C05-4612-811E-A32E4516EBC1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:vision130_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA0B1985-F0C0-4554-98FB-B358F42B9F65", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:vision130:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "49A6FC0D-8687-4563-9C38-5AF0DCC46926"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:vision230_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "799F8466-30AC-4BD8-8AD5-35C2CFD98C37", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:vision230:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C360B7F4-9FDB-4143-87A0-1006C7C3A39C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:vision280_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7E91809-C43C-4ACD-9F26-448AD25E9EEF", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:vision280:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "519F0192-4F48-4954-BAE1-8DC74BC0C017"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:vision290_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECD944B5-2B08-4B9B-B0B0-17114FB58FB5", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:vision290:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "66A05131-B264-4858-A533-CBA5E229D40D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:vision530_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E702599A-8C23-4E13-B6D0-2E7CD7F20805", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:vision530:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7A2DAADD-AD0E-43C5-B3CB-2F5445235C4F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:vision120_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF329EB4-7AF2-48E5-AD8A-EC5C3E3C22EB", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:vision120:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CF245A2D-9C93-41C2-AD88-8B2ABA026D5B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:unitronics:visilogic:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "168D1C28-7A90-4D17-A3EE-1EA5F8C7AA0D", "versionEndExcluding": "9.9.00"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:samba_3.5_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F976824-529B-4A9D-8C8B-A77F2C73819C", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:samba_3.5:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A510D42F-9299-4744-923E-1C828668431E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:samba_4.3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F3A2432-151D-4F10-A2A6-A39DCB3D43EE", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:samba_4.3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AB661A2E-DED6-4BD7-9757-7592E786FD0E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:unitronics:samba_7_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41B9A502-15B8-45DB-B169-B0317EC50EBF", "versionEndExcluding": "12.38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:unitronics:samba_7:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "66362CAA-4499-465D-86B2-1823DE372137"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "cisaVulnerabilityName": "Unitronics Vision PLC and HMI Insecure Default Password Vulnerability"}

9.8 /10