CVE-2023-0102

🗓️ 15 Feb 2023 17:20:48Reported by icscertType

LS ELECTRIC XBC-DN32U OS 01.80 missing authentication for deletion comman

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the microprogrammed software of the programmable logic controller LS ELECTRIC XBC-DN32U lies in the lack of authentication for a critical function, allowing an intruder to delete arbitrary files.	3 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-0102	15 Feb 202320:49	–	circl
CNNVD	LS ELECTRIC XBC-DN32U 访问控制错误漏洞	15 Feb 202300:00	–	cnnvd
CNVD	LS ELECTRIC XBC-DN32U Access Control Error Vulnerability (CNVD-2023-21679)	17 Feb 202300:00	–	cnvd
Cvelist	CVE-2023-0102 CVE-2023-0102	15 Feb 202317:20	–	cvelist
EUVD	EUVD-2023-12200	3 Oct 202520:07	–	euvd
ICS	LS ELECTRIC XBC-DN32U	9 Feb 202300:00	–	ics
NVD	CVE-2023-0102	15 Feb 202318:15	–	nvd
Prion	Authentication flaw	15 Feb 202318:15	–	prion
Positive Technologies	PT-2023-3369 · Ls Electric · Ls Electric Xbc-Dn32U	9 Feb 202300:00	–	ptsecurity

NVD

Vulners

Node

ls-electric xbc-dn32u_firmwareMatch01.80

AND

ls-electric xbc-dn32uMatch-

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Operating System"
    ],
    "product": "XBC-DN32U",
    "vendor": "LS Electric",
    "versions": [
      {
        "status": "affected",
        "version": "01.80"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-23-040-02

17 Jun 2026 05:24Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.1

EPSS0.00691

SSVC

CWE-306

cve-2023-0102 ls electric xbc-dn32u authentication bypass file deletion security vulnerability