Ls Electric
11 CVEs across 473 Ls Electric products. Browse Ls Electric vulnerabilities, severities, and proof-of-concept exploits.
Ls Electric products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-49850 | | 2025-06-17 | A Heap-based Buffer Overflow vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data… | |
CVE-2025-49849 | | 2025-06-17 | An Out-of-bounds Read vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data, which c… | |
CVE-2025-49848 | High | 7.8 | 2025-06-17 | An out-of-bounds write vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data, which… |
CVE-2023-22807 | Critical | 9.8 | 2023-02-15 | LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol. An attacker could contro… |
CVE-2023-22806 | High | 7.5 | 2023-02-15 | LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could all… |
CVE-2023-22805 | Medium | 6.5 | 2023-02-15 | LS ELECTRIC XBC-DN32U with operating system version 01.80 has improper access control to its read prohibition feature. This could allow a remote attacker to re… |
CVE-2023-22804 | Critical | 9.1 | 2023-02-15 | LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC. This could allow an attacker to create and use… |
CVE-2023-22803 | High | 7.5 | 2023-02-15 | LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC. This could allow an attacker to c… |
CVE-2023-0103 | High | 7.5 | 2023-02-15 | If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the d… |
CVE-2023-0102 | Critical | 9.1 | 2023-02-15 | LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary… |
CVE-2022-2758 | Medium | 6.5 | 2022-08-31 | Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (LSIS) Co. Ltd LS Electric XG5000 softwar… |