CVE-2023-22806

7.5 highEPSS 0.4%

High (7.5) in ls-electric xbc-dn32u firmware. EPSS 0.4% chance of exploitation in the next 30 days.

LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could allow an attacker to gain sensitive information such as user credentials.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2023-02-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ls-electric:xbc-dn32u_firmware

References

https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02
https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02

Check your stack JSON