CVE-2023-22806

HIGH

LS ELECTRIC XBC-DN32U 01.80 - Cleartext Transmission of Sensitive Information via XGT Protocol

Title source: llm

Description

LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could allow an attacker to gain sensitive information such as user credentials.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource

https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02

Scores

CVSS v3 7.5

EPSS 0.0037

EPSS Percentile 28.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-319

Status published

Products (1)

ls-electric/xbc-dn32u_firmware 01.80

Published Feb 15, 2023

Tracked Since Feb 18, 2026