Vendors / LS Electric Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 6
Exploited now LS Electric records in CISA KEV No LS Electric vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00668 · Published 2023-02-15 · No fix listed CWE-284
Priority MEDIUM 49
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00708 · Published 2023-02-15 · No fix listed CWE-306
Priority MEDIUM 46
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00691 · Published 2023-02-15 · No fix listed CWE-306
Priority MEDIUM 40
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00591 · Published 2023-02-15 · No fix listed CWE-306
Priority MEDIUM 40
If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00663 · Published 2023-02-15 · No fix listed CWE-788
Priority LOW 39
LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00367 · Published 2023-02-15 · No fix listed CWE-319
Priority LOW 38
A Heap-based Buffer Overflow vulnerability exists within the parsing of PRJ files.
CVSS 4.0 HIGH 8.4· Local · No auth · User interaction · EPSS 0.00166 · Published 2025-06-17 · No fix listed CWE-122
Priority LOW 38
An Out-of-bounds Read vulnerability exists within the parsing of PRJ files.
CVSS 4.0 HIGH 8.4· Local · No auth · User interaction · EPSS 0.00163 · Published 2025-06-17 · No fix listed CWE-125
Priority LOW 38
An out-of-bounds write vulnerability exists within the parsing of PRJ files.
CVSS 4.0 HIGH 8.4· Local · No auth · User interaction · EPSS 0.00184 · Published 2025-06-17 · No fix listed CWE-787
Priority LOW 30
LS ELECTRIC XBC-DN32U with operating system version 01.80 has improper access control to its read prohibition feature.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00724 · Published 2023-02-15 · No fix listed CWE-284
Priority LOW 29
Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (LSIS) Co.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00404 · Published 2022-08-31 · Fixed in V4.0, V1.30 +5 CWE-326
Open these records in search → All records by CVSS severity
3 6 2 0 0
THREATIST.IORead the docs