CVE-2023-22806

CVE-2023-22806 affects LS ELECTRIC XBC-DN32U (OS version 01.80) where the device transmits sensitive information in cleartext over the XGT protocol, enabling potential credential disclosure. Root cause: cleartext transmission in XGT. Affected product/version: XBC-DN32U, OS 01.80. Impact: exposure...

CVE-2023-22806 CVE-2023-22806

LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could allow an attacker to gain sensitive information such as user credentials...

CVE-2023-22806 CVE-2023-22806

LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could allow an attacker to gain sensitive information such as user credentials...

CVE-2023-22805 CVE-2023-22805

LS ELECTRIC XBC-DN32U with operating system version 01.80 has improper access control to its read prohibition feature. This could allow a remote attacker to remotely set the feature to lock users out of reading data from the device...

CVE-2023-22805

CVE-2023-22805 affects LS ELECTRIC XBC-DN32U with OS 01.80, exposing improper access control in the read-prohibition feature. This could allow a remote attacker to set the feature to lock users out from reading data. The linked sources describe the affected product, version, and risk; mitigations...

CVE-2023-22805 CVE-2023-22805

LS ELECTRIC XBC-DN32U with operating system version 01.80 has improper access control to its read prohibition feature. This could allow a remote attacker to remotely set the feature to lock users out of reading data from the device...

CVE-2023-22804 CVE-2023-22804

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC. This could allow an attacker to create and use an account with elevated privileges and take control of the device...

CVE-2023-22804

LS ELECTRIC XBC-DN32U with OS version 01.80 has a vulnerability (CVE-2023-22804) where authentication is missing for creating PLC users. This could let an attacker create an account with elevated privileges and take control of the device. Exploitation details are not provided in the documents, bu...

CVE-2023-22804 CVE-2023-22804

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC. This could allow an attacker to create and use an account with elevated privileges and take control of the device...

CVE-2023-22803 CVE-2023-22803

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC. This could allow an attacker to change the PLC's mode arbitrarily...

CVE-2023-22803

LS ELECTRIC XBC-DN32U PLC (OS 01.80) is affected by CVE-2023-22803 due to missing authentication for critical functions (CWE-306). The vulnerability could allow an attacker to arbitrarily change the PLC’s mode. The related advisories confirm affected product/version and describe the impact as una...

CVE-2023-22803 CVE-2023-22803

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC. This could allow an attacker to change the PLC's mode arbitrarily...

CVE-2023-0103

LS ELECTRIC XBC-DN32U (OS version 01.80) is affected by CVE-2023-0103, where memory locations outside the communication buffer can cause the PLC to stop, resulting in a denial-of-service condition. The issue is described as a buffer/ memory location access problem. Current public sources indicate...

CVE-2023-0103 CVE-2023-0103

If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating. This could allow an attacker to cause a denial-of-service condition...

CVE-2023-0103 CVE-2023-0103

If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating. This could allow an attacker to cause a denial-of-service condition...

CVE-2023-0102 CVE-2023-0102

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files...

CVE-2023-0102

CVE-2023-0102 affects LS ELECTRIC XBC-DN32U (OS 01.80). The issue is a missing authentication for the deletion command, enabling an attacker to delete arbitrary files. Public documentation in connected sources confirms the device, OS version, and the deletion-command vulnerability, with related a...

CVE-2023-0102 CVE-2023-0102

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files...

SUSE CVE-2015-1872

The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

SUSE CVE-2016-2233

Stack-based buffer overflow in the inboundcapls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service crash via a large number of options in a CAP LS message...