CVE-2022-2758: Ls-Electric GM7 Firmware

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (LSIS) Co. Ltd LS Electric XG5000 software prior to V4.0 and LS Electric PLCs: all versions of XGK-CPUU/H/A/S/E prior to V3.50, all versions of XGI-CPUU/UD/H/S/E prior to V3.20, all versions of XGR-CPUH prior to V1.80, all versions of XGB-XBMS prior to V3.00, all versions of XGB-XBCH prior to V1.90, and all versions of XGB-XECH prior to V1.30. This would allow an attacker to identify and decrypt the password of the affected PLCs by sniffing the PLC’s communication traffic.

Affected products

  • Ls-Electric GM7 Firmware: affected versions not specified
  • Ls-Electric GM7U Firmware: affected versions not specified
  • Ls-Electric k120s Firmware: affected versions not specified
  • Ls-Electric k80s Firmware: affected versions not specified
  • Ls-Electric Xbc-dn(p)32u/dc Firmware: affected versions not specified
  • Ls-Electric Xbc-dn(p)32u Firmware: affected versions not specified
  • Ls-Electric Xbc-dn(p)32ua/dc Firmware: affected versions not specified
  • Ls-Electric Xbc-dn(p)32ua Firmware: affected versions not specified
  • Ls-Electric Xbc-dn(p)32up/dc Firmware: affected versions not specified
  • Ls-Electric Xbc-dn(p)32up Firmware: affected versions not specified
  • Ls-Electric Xbc-DN10E Firmware: affected versions not specified
  • Ls-Electric Xbc-DN14E Firmware: affected versions not specified
  • Ls-Electric Xbc-DN20E Firmware: affected versions not specified
  • Ls-Electric Xbc-DN20SU Firmware: affected versions not specified
  • Ls-Electric Xbc-DN30E Firmware: affected versions not specified
  • Ls-Electric Xbc-DN30SU Firmware: affected versions not specified
  • Ls-Electric Xbc-DN32H/DC Firmware: affected versions not specified
  • Ls-Electric Xbc-DN32H Firmware: affected versions not specified
  • Ls-Electric Xbc-DN40SU Firmware: affected versions not specified
  • Ls-Electric Xbc-DN60SU Firmware: affected versions not specified
  • Ls-Electric Xbc-DN64H/DC Firmware: affected versions not specified
  • Ls-Electric Xbc-DN64H Firmware: affected versions not specified
  • Ls-Electric Xbc-DP10E Firmware: affected versions not specified
  • Ls-Electric Xbc-DP14E Firmware: affected versions not specified
  • Ls-Electric Xbc-DP20E Firmware: affected versions not specified
  • and 210 more

Published 2022-08-31. Last modified 2026-06-17.