Unitronics VisiLogic vulnerabilities

Latest Unitronics VisiLogic CVEs

Newest publication first

1. CVE-2024-38435 Unitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditions

   Published 2024-07-21

   High·CVSS 7.5 EPSS 0.45%

   Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service

2. CVE-2023-6448 Unitronics VisiLogic uses a default administrative password

   Published 2023-12-05

   Critical·CVSS 9.8 EPSS 2.1% CISA KEV added 2023-12-11 Exploited in the wild

   Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.