Vulnerabilities

A Heap-based Buffer Overflow vulnerability exists within the parsing of PRJ files.

An Out-of-bounds Read vulnerability exists within the parsing of PRJ files.

An out-of-bounds write vulnerability exists within the parsing of PRJ files.

LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol.

LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol.

LS ELECTRIC XBC-DN32U with operating system version 01.80 has improper access control to its read prohibition feature.

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC.

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC.

If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating.

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command.

Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (LSIS) Co.