CVE-2023-0103

If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating. This could allow an attacker to cause a denial-of-service condition.

Score

CVSS 3.1 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2023-02-15

Last modified

2025-01-16

Weaknesses

CWE-788

Affected products

• Xbc-dn32u Firmware (Ls-electric)
• Xbc-dn32u (Ls Electric)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02