CVEvulnerability

CVE-2022-2758

5.9 MEDIUM Published 2022-08-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-326

Description

Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (LSIS) Co. Ltd LS Electric XG5000 software prior to V4.0 and LS Electric PLCs: all versions of XGK-CPUU/H/A/S/E prior to V3.50, all versions of XGI-CPUU/UD/H/S/E prior to V3.20, all versions of XGR-CPUH prior to V1.80, all versions of XGB-XBMS prior to V3.00, all versions of XGB-XBCH prior to V1.90, and all versions of XGB-XECH prior to V1.30. This would allow an attacker to identify and decrypt the password of the affected PLCs by sniffing the PLC’s communication traffic.

Affected configurations

• ls-electric xg5000 • ls-electric xgk-cpuun firmware • ls-electric xgk-cpuhn firmware • ls-electric xgk-cpusn firmware • ls-electric xgk-cpuu firmware • ls-electric xgk-cpuh firmware • ls-electric xgk-cpua firmware • ls-electric xgk-cpus firmware • ls-electric xgk-cpue firmware • ls-electric xgi-cpuun firmware • ls-electric xgi-cpuu firmware • ls-electric xgi-cpuh firmware • ls-electric xgi-cpus firmware • ls-electric xgi-cpue firmware • ls-electric xgr-cpuh\/f firmware • ls-electric xgr-cpuh\/t firmware • ls-electric xgr-cpuh\/s firmware • ls-electric xgi-d21a firmware • ls-electric xgi-d22a firmware • ls-electric xgi-d22b firmware • ls-electric xgi-d24a firmware • ls-electric xgi-d24b firmware • ls-electric xgi-d28a firmware • ls-electric xgi-d28b firmware • ls-electric xgi-a12a firmware • ls-electric xgi-a21a firmware • ls-electric xgi-a21c firmware • ls-electric xgq-ry1a firmware • ls-electric xgq-ry2a firmware • ls-electric xgq-ry2b firmware • ls-electric xgq-tr1c firmware • ls-electric xgq-tr2a firmware • ls-electric xgq-tr2b firmware • ls-electric xgq-tr4a firmware • ls-electric xgq-tr4b firmware • ls-electric xgq-tr8a firmware • ls-electric xgq-tr8b firmware • ls-electric xgq-ss2a firmware • ls-electric xgf-av8a firmware • ls-electric xgf-ac8a firmware • ls-electric xgf-ad16a firmware • ls-electric xgf-aw4s firmware • ls-electric xgf-dv4a firmware • ls-electric xgf-dc4a firmware • ls-electric xgf-dv8a firmware • ls-electric xgf-dc8a firmware • ls-electric xgf-dv4s firmware • ls-electric xgf-dc4s firmware • ls-electric xgf-ah6a firmware • ls-electric xgf-tc4s firmware • ls-electric xgf-rd4a firmware • ls-electric xgf-rd4s firmware • ls-electric xgf-rd8a firmware • ls-electric xgf-tc4ud firmware • ls-electric xgf-tc4rt firmware • ls-electric xgf-ho2a firmware • ls-electric xgf-hd2a firmware • ls-electric xgf-h08a firmware • ls-electric xgf-ac4h firmware • ls-electric xgf-dc4h firmware … and 175 more

Related

Weakness · CWE (1)

  • CWE-326 Inadequate Encryption Strength weakness

References