PT-2023-6657 · Ls Electric · Xbc-Dn32U

·

CVE-2023-0103

·

Published

2023-02-15

·

Updated

2023-02-24

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions LS ELECTRIC XBC-DN32U version 01.80
Description The issue is caused by a buffer overflow in the memory of the programmable logic controller. If an attacker accesses memory locations outside of the communication buffer, the device stops operating, potentially allowing a remote attacker to cause a denial-of-service condition.
Recommendations For version 01.80, consider restricting access to memory locations outside of the communication buffer to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Access of Memory Location After End of Buffer

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2023-07427
CVE-2023-0103

Affected Products

Xbc-Dn32U