cve/2023/CVE-2023-2003.md

### [CVE-2023-2003](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2003)
![](https://img.shields.io/static/v1?label=Product&message=Vision1210&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%204.3%2C%20build%205%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-506%3A%20Embedded%20Malicious%20Code&color=brighgreen)

### Description

Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device.

### POC

#### Reference
- https://www.hackplayers.com/2023/07/vulnerabilidad-vision1210-unitronics.html

#### Github
No PoCs found on GitHub currently.