Unitronics Vision PLC and HMI Insecure Default Password Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 11/12/2023. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| visilogic | < 9.9.00 | 9.9.00 |
Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free