ICS/OT Cybersecurity – Unitronics Issues Update to Recently Targeted PLCs

Members using impacted Unitronics Vision or Samba PLCs are highly encouraged to apply VisiLogic version 9.9.00 to existing devices in your environment. Version 9.9.00 has incorporated security enhancements to mitigate the default configuration issues and vulnerability (CVE-2023-6448) that have enabled recent attacks/defacements against the internet connected PLC’s from the CyberAv3ngers identified in the referenced alert, (TLP:CLEAR) CISA Releases Alert on Exploitation of Unitronics PLCs Used in Water and Wastewater Systems.