CVE-2023-22804

LS ELECTRIC XBC-DN32U with OS version 01.80 has a vulnerability (CVE-2023-22804) where authentication is missing for creating PLC users. This could let an attacker create an account with elevated privileges and take control of the device. Exploitation details are not provided in the documents, bu...

CVE-2023-22803 CVE-2023-22803

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC. This could allow an attacker to change the PLC's mode arbitrarily...

CVE-2023-22803 CVE-2023-22803

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC. This could allow an attacker to change the PLC's mode arbitrarily...

CVE-2023-22803

LS ELECTRIC XBC-DN32U PLC (OS 01.80) is affected by CVE-2023-22803 due to missing authentication for critical functions (CWE-306). The vulnerability could allow an attacker to arbitrarily change the PLC’s mode. The related advisories confirm affected product/version and describe the impact as una...

CVE-2023-0103 CVE-2023-0103

If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating. This could allow an attacker to cause a denial-of-service condition...

CVE-2023-0103 CVE-2023-0103

If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating. This could allow an attacker to cause a denial-of-service condition...

CVE-2023-0103

LS ELECTRIC XBC-DN32U (OS version 01.80) is affected by CVE-2023-0103, where memory locations outside the communication buffer can cause the PLC to stop, resulting in a denial-of-service condition. The issue is described as a buffer/ memory location access problem. Current public sources indicate...

CVE-2023-0102 CVE-2023-0102

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files...

CVE-2023-0102 CVE-2023-0102

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files...

CVE-2023-0102

CVE-2023-0102 affects LS ELECTRIC XBC-DN32U (OS 01.80). The issue is a missing authentication for the deletion command, enabling an attacker to delete arbitrary files. Public documentation in connected sources confirms the device, OS version, and the deletion-command vulnerability, with related a...

SUSE CVE-2015-1872

The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

SUSE CVE-2016-2233

Stack-based buffer overflow in the inboundcapls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service crash via a large number of options in a CAP LS message...

LS ELECTRIC XBC-DN32U 访问控制错误漏洞

The LS ELECTRIC XBC-DN32U is a PLC programmable logic controller from LS ELECTRIC in Korea. An Access Control Error vulnerability exists in the LS ELECTRIC XBC-DN32U version 01.80, which stems from a lack of authentication of the PLC's created user, and can be exploited by an attacker to create a...

LS ELECTRIC XBC-DN32U 访问控制错误漏洞

The LS ELECTRIC XBC-DN32U is a PLC programmable logic controller from LS ELECTRIC in Korea. An information disclosure vulnerability exists in the LS ELECTRIC XBC-DN32U version 01.80, which originates when the device transmits sensitive information in clear text when communicating via the XGT...

LS ELECTRIC XBC-DN32U 访问控制错误漏洞

The LS ELECTRIC XBC-DN32U is a PLC programmable logic controller from LS ELECTRIC in Korea. An Access Control Error vulnerability exists in the LS ELECTRIC XBC-DN32U version 01.80. The vulnerability stems from the device's inability to properly control access to the PLC via its internal XGT...

PT-2023-6657 · Ls Electric · Xbc-Dn32U

Name of the Vulnerable Software and Affected Versions: LS ELECTRIC XBC-DN32U version 01.80 Description: The issue is caused by a buffer overflow in the memory of the programmable logic controller. If an attacker accesses memory locations outside of the communication buffer, the device stops...

PT-2023-18707 · Ls Electric · Ls Electric Xbc-Dn32U

Name of the Vulnerable Software and Affected Versions: LS ELECTRIC XBC-DN32U version 01.80 Description: The issue is related to the transmission of sensitive information in cleartext when the device communicates over its XGT protocol. This could allow an attacker to gain sensitive information, su...

CVE-2023-22806: Cleartext Transmission of Sensitive Information

LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could allow an attacker to gain sensitive information such as user credentials...

CVE-2023-22805: Improper Access Control

LS ELECTRIC XBC-DN32U with operating system version 01.80 has improper access control to its read prohibition feature. This could allow a remote attacker to remotely set the feature to lock users out of reading data from the device...

CVE-2023-22804: Missing Authentication for Critical Function

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC. This could allow an attacker to create and use an account with elevated privileges and take control of the device...