Skip to main content

Xbc Dn32U Firmware CVE-2023-0102

CRITICAL
Missing Authentication for Critical Function (CWE-306)
2023-02-15 ics-cert@hq.dhs.gov
Authentication Bypass Xbc Dn32U Firmware
9.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.1 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Feb 15, 2023 - 18:15 nvd
CRITICAL 9.1

DescriptionNVD

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files.

AnalysisAI

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Missing Authentication for Critical Function (CWE-306), which allows attackers to access critical functionality without authentication. LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files. Affected products include: Ls-Electric Xbc-Dn32U Firmware. Version information: version 01.80.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Require authentication for all sensitive operations, implement defense in depth.

More in Xbc Dn32U Firmware

View all
CVE-2023-22807 CRITICAL
9.8 Feb 15

LS ELECTRIC XBC-DN32U with operating system version 01.80 does not properly control access to the PLC over its internal

CVE-2023-22804 CRITICAL
9.8 Feb 15

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to create users on the PLC. Rated cr
CVE-2023-22806 HIGH
7.5 Feb 15

LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicatin
CVE-2023-22803 HIGH
7.5 Feb 15

LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication to perform critical functions to the
CVE-2023-0103 HIGH
7.5 Feb 15

If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are out
CVE-2023-22805 MEDIUM
4.3 Feb 15

LS ELECTRIC XBC-DN32U with operating system version 01.80 has improper access control to its read prohibition feature. R

Same weakness CWE-306 – Missing Authentication for Critical Function

View all
CVE-2017-10271 HIGH POC
7.5
CVE-2025-3248 CRITICAL POC
9.8
CVE-2024-11680 CRITICAL POC
9.8
CVE-2025-0108 HIGH POC
8.8
CVE-2025-32433 CRITICAL POC
10.0
CVE-2016-2004 CRITICAL POC
9.8
CVE-2024-46506 CRITICAL POC
10.0
CVE-2025-8943 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2023-0102 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy