Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

Unitronics

Products: VisiLogic · Vision1210

40.6

Score

2

CVEs

1

Active

1

PoC

1

KEV

#53

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2023-6448	2023-12-05	9.8v3.1	ACTIVE		Low	None	YES	40.6	VisiLogic	Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.
CVE-2023-2003	2023-07-13	9.1v3.1	POC	—	Low	None	YES	0.0	Vision1210	Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3