CVE-2023-0102CWE-306

CVE-2023-0102

Critical · published February 15, 2023

CVSS v3.1
9.1
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

🔥 A glaring oversight means anyone can remotely delete files on the LS ELECTRIC XBC-DN32U—no authentication needed! Think of it like a restaurant where the kitchen staff can toss orders into the trash without checking who they are or what’s meant to be served—chaos is just one command away! This vulnerability is absolutely devastating; an attacker could wipe important files or configurations, leading to system dysfunction and costly downtime. With critical systems at risk, the consequences could be severe, affecting operations and potentially leading to data loss.

Put simply

Think of it like a restaurant where the kitchen staff can toss orders into the trash without checking who they are or what’s meant to be served—chaos is just one command away! CVE-2023-0102 reveals that the LS ELECTRIC XBC-DN32U, operating on version 01.80, lacks authentication checks for its file deletion command, enabling unauthorized users to delete arbitrary files.

What to do

This vulnerability is absolutely devastating; an attacker could wipe important files or configurations, leading to system dysfunction and costly downtime. With critical systems at risk, the consequences could be severe, affecting operations and potentially leading to data loss. Immediate action is necessary: patch to the latest version as soon as it becomes available, review your security settings, and implement strict access controls to prevent unauthorized commands. Don't wait for a breach to kick your security practices into gear! You've got this! Take these steps and you’ll be back in control in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00691 · 52.2th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2023-02-15T17:20Z
EPSS history
Timeline
  • 15 FEB 17:20Z
    CVE-2023-0102
    cvelistv5