Where
-Infinity
0

Trending

Last week
Last month
Last year

Unitronics Vision PLC and HMIUnitronics VisiLogic uses a default administrative password

Risk 78
Severity
9.8
Exploited
EPSS
6.84%
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

1 / 2
Source: NVD
First published (updated )
CVE-2023-6448

Unitronics VisiLogic OPLC IDEBuffer Overflow

Risk 86
Severity
9.8
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file.

First published (updated )
CVE-2016-4519

Unitronics VisiLogic OPLC IDEBuffer Overflow

Risk 80
Severity
9.6
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename.

First published (updated )
CVE-2015-7939

Unitronics VisiLogic OPLC IDECode Injection

Risk 52
Severity
7.5
Code Injection
AV:N/AC:L/Au:N/C:P/I:P/A:P

Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors.

First published (updated )
CVE-2015-7905

Unitronics VisiLogic OPLC IDEUnitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, w…

Risk 47
Severity
6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.

First published (updated )
CVE-2015-6478

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203