CVE-2023-22806CWE-319

CVE-2023-22806

High · published February 15, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
29.4
In the wild
Unconfirmed
What it is

LS ELECTRIC XBC-DN32U with operating system version 01.80 transmits sensitive information in cleartext when communicating over its XGT protocol. This could allow an attacker to gain sensitive information such as user credentials.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00367 · 29.4th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2023-02-15T17:28Z
EPSS history
Timeline
  • 15 FEB 17:28Z
    CVE-2023-22806
    cvelistv5