CVE-2023-22807criticalCWE-284

CVE-2023-22807: falha crítica em LS Electric XBC-DN32U

CVE-2023-22807

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar XBC-DN32U

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.7%
LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol. An attacker could control and tamper with the PLC by sending the packets to the PLC over its XGT protocol.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
LS Electric · XBC-DN32U
CVEs relacionadas — LS Electric XBC-DN32U

No mesmo produto, das mais perigosas para as menos.

CVE-2023-22805MEDIUMCVE-2023-22805EPSS 0.7%CVE-2023-22804CRITICALCVE-2023-22804EPSS 0.7%CVE-2023-0102CRITICALCVE-2023-0102EPSS 0.7%CVE-2023-0103HIGHCVE-2023-0103EPSS 0.7%CVE-2023-22803HIGHCVE-2023-22803EPSS 0.6%CVE-2023-22806HIGHCVE-2023-22806EPSS 0.4%