PatchTheCVEls-electric vulnerabilities
Recent CVEs affecting ls-electric products. 7 tracked.
ls-electric has 7 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-02-15. Highest priority: CVE-2023-22807 (score 52/100).
- CVE-2023-22807 CRITICAL 9.8 MITIGATE LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its
- CVE-2023-22806 HIGH 7.5 MITIGATE LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when co
- CVE-2023-22805 MEDIUM 6.5 MITIGATE LS ELECTRIC XBC-DN32U with operating system version 01.80 has improper access control to its read prohibition
- CVE-2023-22804 CRITICAL 9.1 MITIGATE LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC
- CVE-2023-22803 HIGH 7.5 MITIGATE LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functi
- CVE-2023-0103 HIGH 7.5 MITIGATE If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 th
- CVE-2023-0102 CRITICAL 9.1 MITIGATE LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command
FAQ
How do I fix ls-electric vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ls-electric being exploited right now?
None of the tracked ls-electric CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ls-electric CVE should I patch first?
CVE-2023-22807 currently ranks highest (52/100): LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its.