https://pwn.watch/t/unitronics Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Mon, 11 Dec 2023 00:00:00 GMT https://pwn.watch/i/unitronics-vision-plc-and-hmi-cve-2023-6448 https://pwn.watch/i/unitronics-vision-plc-and-hmi-cve-2023-6448 Mon, 11 Dec 2023 00:00:00 GMT critical <p>Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands. Added to CISA KEV on 2023-12-11.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2023-12-11: CISA added CVE-2023-6448 to the KEV catalog (due 2023-12-18).</li></ul> <p><strong>CVEs:</strong> CVE-2023-6448</p>