Vision1210 Firmware vulnerabilities

2 known vulnerabilities in Vision1210 Firmware from Unitronics. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Unitronics Vision PLC and HMI Insecure Default Password Exploited

  CVE-2023-6448Dec 5, 2023UnitronicsEPSS 2.09%

  Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

• 9.8 Critical severity

  Vision1210: Embedded Malicious Code

  CVE-2023-2003Jul 13, 2023Unitronics

  Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a