CVE-2023-6448Unitronics VisiLogic uses a default administrative password
Aktif olarak istismar ediliyor — Unitronics Vision PLC and HMI Insecure Default Password Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını 11.12.2023 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 18.12.2023.
Gerekli işlem: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Note that while it is possible to change the default password, implementors are encouraged to remove affected controllers from public networks and update the affected firmware: https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf; https://nvd.nist.gov/vuln/detail/CVE-2023-6448
Açıklama
Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| unitronics | samba 3.5 firmware | < 12.38 | |
| unitronics | samba 4.3 firmware | < 12.38 | |
| unitronics | samba 7 firmware | < 12.38 | |
| Unitronics | VisiLogic | < 9.9.00 | |
| unitronics | vision1040 firmware | < 12.38 | |
| unitronics | vision120 firmware | < 12.38 | |
| unitronics | vision1210 firmware | < 12.38 | |
| unitronics | vision130 firmware | < 12.38 | |
| unitronics | vision230 firmware | < 12.38 | |
| unitronics | vision280 firmware | < 12.38 | |
| unitronics | vision290 firmware | < 12.38 | |
| unitronics | vision350 firmware | < 12.38 | |
| unitronics | vision430 firmware | < 12.38 | |
| unitronics | vision530 firmware | < 12.38 | |
| unitronics | vision560 firmware | < 12.38 | |
| unitronics | vision570 firmware | < 12.38 | |
| unitronics | vision700 firmware | < 12.38 |
Kaynaklar ve yamalar
- https://www.cisa.gov/news-events/alerts/2023/11/28/exploitation-unitronics-plcs-used-water-and-wastewater-systems government-resourceThird Party AdvisoryUS Government Resource
- https://www.unitronicsplc.com/cyber_security_vision-samba/ Product
- https://downloads.unitronicsplc.com/Sites/plc/Visilogic/Version_Changes-Bug_Reports/VisiLogic%209.9.00%20Vers… release-notesRelease Notes
- https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CV… vendor-advisoryVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6448 US Government Resource
CPE eşleşmeleri (NVD) (17)
cpe:2.3:o:unitronics:vision1210_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:vision1040_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:vision700_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:vision570_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:vision560_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:vision430_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:vision350_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:vision130_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:vision230_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:vision280_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:vision290_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:vision530_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:vision120_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:a:unitronics:visilogic:*:*:*:*:*:*:*:*< 9.9.00cpe:2.3:o:unitronics:samba_3.5_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:samba_4.3_firmware:*:*:*:*:*:*:*:*< 12.38cpe:2.3:o:unitronics:samba_7_firmware:*:*:*:*:*:*:*:*< 12.38