Descripción
Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands.
Acción recomendada
Aplicar las mitigaciones del fabricante; si no están disponibles, discontinuar el uso del producto.
Referencias
- Note that while it is possible to change the default password, implementors are encouraged to remove affected controllers from public networks and update the affected firmware downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cy…
- Ficha en NVD (NIST) nvd.nist.gov/vuln/detail/CVE-2023-6448