CVE-2023-22807

9.8 criticalEPSS 0.7%

Critical (9.8) in ls-electric xbc-dn32u firmware. EPSS 0.7% chance of exploitation in the next 30 days.

LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal XGT protocol. An attacker could control and tamper with the PLC by sending the packets to the PLC over its XGT protocol.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2023-02-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ls-electric:xbc-dn32u_firmware

References

https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02
https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02

Check your stack JSON