Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-22807 EUVD-2023-26919GHSA-qvrw-w6hg-g36x

CVE-2023-22807

Published Feb 15, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Description

LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol. An attacker could control and tamper with the PLC by sending the packets to the PLC over its XGT protocol.

Affected products

VendorProductAffectedFixed
LS Electric XBC-DN32U Operating System Version 01.80 —

Advisories 1

References