PT-2023-6657 · Ls Electric · Xbc-Dn32U
Heea Go
·
Publicado
2023-02-15
·
Atualizado
2023-02-24
·
CVE-2023-0103
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
LS ELECTRIC XBC-DN32U version 01.80
Description
The issue is caused by a buffer overflow in the memory of the programmable logic controller. If an attacker accesses memory locations outside of the communication buffer, the device stops operating, potentially allowing a remote attacker to cause a denial-of-service condition.
Recommendations
For version 01.80, consider restricting access to memory locations outside of the communication buffer to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Access of Memory Location After End of Buffer
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Xbc-Dn32U