CVE-2023-22806

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-22806
LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could allow an attacker to gain sensitive information such as user credentials.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:ls-electric:xbc-dn32u_firmware:01.80:*:*:*:*:*:*:*
cpe:2.3:h:ls-electric:xbc-dn32u:-:*:*:*:*:*:*:*
History

07 Nov 2023, 04:07

Type Values Removed Values Added
Summary LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could allow an attacker to gain sensitive information such as user credentials. LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could allow an attacker to gain sensitive information such as user credentials.
Information

Published : 2023-02-15 18:15

Updated : 2024-02-28 19:51

NVD link : CVE-2023-22806

Mitre link : CVE-2023-22806

CVE.ORG link : CVE-2023-22806

JSON object : View

Products Affected

ls-electric

  • xbc-dn32u
  • xbc-dn32u_firmware
CWE
CWE-319

Cleartext Transmission of Sensitive Information