CVE-2023-22803: Ls-Electric Xbc-DN32U Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the PLC. This could allow an attacker to change the PLC's mode arbitrarily.

Affected products

• Ls-Electric Xbc-DN32U Firmware: version 01.80 only

Published 2023-02-15. Last modified 2026-06-17.