Improper access control in LS Electric XBC-DN32U
LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol.
7 records
LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol.
LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol.
LS ELECTRIC XBC-DN32U with operating system version 01.80 has improper access control to its read prohibition feature.
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC.
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC.
If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating.
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command.