← CVE Intelligence

CVE-2023-22804

CVE-2023-22804 PUBLISHED

Description (CNA)

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC. This could allow an attacker to create and use an account with elevated privileges and take control of the device.

Affected (CNA)

Vendor / productVersions
LS Electric / XBC-DN32Uaffected Operating System Version 01.80

CWE

CWE-306

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.