Skip to content
OpenAdvisories

Vendor

LS Electric

10 known vulnerabilities.

6 results · Clear filters · Feed

  • High 8.4

    Out-of-bounds Read in Write in LS Electric GMWin 4

    A Heap-based Buffer Overflow vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data, which can result in different memory corruption issues within the application, such as reading and w…

  • High 8.4

    Out-of-bounds Read in Write in LS Electric GMWin 4

    An Out-of-bounds Read vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data, which can result in different memory corruption issues within the application, such as reading and writing …

  • High 7.8

    Out-of-bounds Write in LS Electric GMWin 4

    An out-of-bounds write vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data, which can result in different memory corruption issues within the application, such as reading and writing…

  • High 7.5

    CVE-2023-22806

    LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could allow an attacker to gain sensitive information such as user credentials.

  • High 7.5

    CVE-2023-22803

    LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC. This could allow an attacker to change the PLC's mode arbitrarily.

  • High 7.5

    CVE-2023-0103

    If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating. This could allow an attacker to cause a denial-of-service condition.