Описание
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC. This could allow an attacker to change the PLC's mode arbitrarily.
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:ls-electric:xbc-dn32u_firmware:01.80:*:*:*:*:*:*:*
cpe:2.3:h:ls-electric:xbc-dn32u:-:*:*:*:*:*:*:*
EPSS
Процентиль: 23%
0.00076
Низкий
7.5 High
CVSS3
7.5 High
CVSS3
Дефекты
CWE-306
Связанные уязвимости
CVSS3: 7.5
github
почти 3 года назад
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC. This could allow an attacker to change the PLC's mode arbitrarily.
EPSS
Процентиль: 23%
0.00076
Низкий
7.5 High
CVSS3
7.5 High
CVSS3
Дефекты
CWE-306