Ls-Electric Xbc-Dn32u Firmware
7 CVEs affecting Ls-Electric Xbc-Dn32u Firmware. Latest disclosed: 2023-02-15. Critical: 3, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-22807 | Critical | 9.8 | 2023-02-15 | LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol. An attacker could contro… |
CVE-2023-22804 | Critical | 9.1 | 2023-02-15 | LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC. This could allow an attacker to create and use… |
CVE-2023-0102 | Critical | 9.1 | 2023-02-15 | LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary… |
CVE-2023-22806 | High | 7.5 | 2023-02-15 | LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could all… |
CVE-2023-22803 | High | 7.5 | 2023-02-15 | LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC. This could allow an attacker to c… |
CVE-2023-0103 | High | 7.5 | 2023-02-15 | If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the d… |
CVE-2023-22805 | Medium | 6.5 | 2023-02-15 | LS ELECTRIC XBC-DN32U with operating system version 01.80 has improper access control to its read prohibition feature. This could allow a remote attacker to re… |