high7.5
CVE-2023-22803
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC.
Impact
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC. This could allow an attacker to change the PLC's mode arbitrarily.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ls-Electric | Xbc-Dn32u Firmware | Version 01.80 |