CVE-2023-22806
CVE-2023-22806

7.5HIGH

Key Information:

Vendor

Ls Electric

Status
Xbc-dn32u
Vendor
CVE Published:
15 February 2023

What is CVE-2023-22806?

The LS ELECTRIC XBC-DN32U device operating with version 01.80 is vulnerable to a cleartext transmission issue over its XGT protocol. This vulnerability allows for the unencrypted transmission of sensitive information, including user credentials, which could be intercepted by an attacker during communication. Ensuring the confidentiality of data is critical, and this vulnerability poses a significant risk that can be exploited if not properly mitigated.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

XBC-DN32U Operating System Version 01.80

References

https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

HeeA Go of Dankook University reported these vulnerabilities
JSON
.