CVE-2023-22807

LS ELECTRIC XBC-DN32U (OS version 01.80) has an improper access control vulnerability in the XGT protocol that could allow an attacker to control and tamper with the PLC by sending packets over XGT. This CVE (CVE-2023-22807) is part of a broader set affecting XBC-DN32U and related CVEs (e.g., 228...

CVE-2023-22807 CVE-2023-22807

LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol. An attacker could control and tamper with the PLC by sending the packets to the PLC over its XGT protocol...