Skip to content
Noroxi

ls-electric records

8 published records for vendor ls-electric.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

8 records
  • CVE-2023-22804
    39Monitor

    LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC.

    CriticalCVSS 9.8No exploitEPSS 0%

    ls-electric · xbc-dn32u firmwareFeb 15, 2023

  • CVE-2023-22807
    39Monitor

    LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol.

    CriticalCVSS 9.8No exploitEPSS 0%

    ls-electric · xbc-dn32u firmwareFeb 15, 2023

  • CVE-2023-0102
    36Monitor

    LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command.

    CriticalCVSS 9.1No exploitEPSS 0%

    ls-electric · xbc-dn32u firmwareFeb 15, 2023

  • CVE-2023-0103
    30Monitor

    If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communic

    HighCVSS 7.5No exploitEPSS 0%

    ls-electric · xbc-dn32u firmwareFeb 15, 2023

  • CVE-2023-22803
    30Monitor

    LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC.

    HighCVSS 7.5No exploitEPSS 0%

    ls-electric · xbc-dn32u firmwareFeb 15, 2023

  • CVE-2023-22806
    30Monitor

    LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT proto

    HighCVSS 7.5No exploitEPSS 0%

    ls-electric · xbc-dn32u firmwareFeb 15, 2023

  • CVE-2022-2758
    23Monitor

    Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (LSIS) Co.

    MediumCVSS 5.9No exploitEPSS 0%

    ls-electric · xg5000Aug 31, 2022

  • CVE-2023-22805
    17Monitor

    LS ELECTRIC XBC-DN32U with operating system version 01.80 has improper access control to its read prohibition feature.

    MediumCVSS 4.3No exploitEPSS 0%

    ls-electric · xbc-dn32u firmwareFeb 15, 2023