Read the docs

LS Electric

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

LS Electric records in CISA KEV

No LS Electric vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xbc-dn32u Firmware 7 records MEDIUM Gm7 Firmware 1 record LOW Gm7u Firmware 1 record LOW K120s Firmware 1 record LOW K80s Firmware 1 record LOW Xbc-dn10e Firmware 1 record LOW Xbc-dn14e Firmware 1 record LOW Xbc-dn20e Firmware 1 record LOW

Records

7 records in Xbc-dn32u Firmware · all components

TI-2023-08976 CVE-2023-22807 · GHSA-qvrw-w6hg-g36x

Improper access control in LS Electric XBC-DN32U

Priority MEDIUM 50

LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00668 Published 2023-02-15 No fix listed CWE-284
TI-2023-08973 CVE-2023-22804 · GHSA-2v8q-fhx5-gwp2

Missing authentication in LS Electric XBC-DN32U

Priority MEDIUM 49

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00708 Published 2023-02-15 No fix listed CWE-306
TI-2023-00098 CVE-2023-0102 · GHSA-w5f8-g225-cm8h

Missing authentication in LS Electric XBC-DN32U

Priority MEDIUM 46

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00691 Published 2023-02-15 No fix listed CWE-306
TI-2023-08972 CVE-2023-22803 · GHSA-ww7q-jpm3-9c64

Missing authentication in LS Electric XBC-DN32U

Priority MEDIUM 40

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00591 Published 2023-02-15 No fix listed CWE-306
TI-2023-08974 CVE-2023-22805 · GHSA-4m9m-xf34-3q86

Improper access control in LS Electric XBC-DN32U

Priority LOW 30

LS ELECTRIC XBC-DN32U with operating system version 01.80 has improper access control to its read prohibition feature.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00724 Published 2023-02-15 No fix listed CWE-284
Open these records in search →