Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (LSIS) Co. Ltd LS Electric XG5000 software prior to V4.0 and LS Electric PLCs: all versions of XGK-CPUU/H/A/S/E prior to V3.50, all versions of XGI-CPUU/UD/H/S/E prior to V3.20, all versions of XGR-CPUH prior to V1.80, all versions of XGB-XBMS prior to V3.00, all versions of XGB-XBCH prior to V1.90, and all versions of XGB-XECH prior to V1.30. This would allow an attacker to identify and decrypt the password of the affected PLCs by sniffing the PLC’s communication traffic.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
XG5000
Vendor
LS Industrial Systems (LSIS) Co. Ltd LS Electric
Product
XG5000
Platforms
Unknown
Default status
Unknown
XG5000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
custom
V4.0
Unavailable
None listed
PLC: XGB-XECH
Vendor
LS Industrial Systems (LSIS) Co. Ltd LS Electric
Product
PLC: XGB-XECH
Platforms
Unknown
Default status
Unknown
PLC: XGB-XECH · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
custom
V1.30
Unavailable
None listed
PLC: XGB-XBCH
Vendor
LS Industrial Systems (LSIS) Co. Ltd LS Electric
Product
PLC: XGB-XBCH
Platforms
Unknown
Default status
Unknown
PLC: XGB-XBCH · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
custom
V1.90
Unavailable
None listed
PLC: XGB-XBMS
Vendor
LS Industrial Systems (LSIS) Co. Ltd LS Electric
Product
PLC: XGB-XBMS
Platforms
Unknown
Default status
Unknown
PLC: XGB-XBMS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
custom
V3.00
Unavailable
None listed
PLC: XGR-CPUH
Vendor
LS Industrial Systems (LSIS) Co. Ltd LS Electric
Product
PLC: XGR-CPUH
Platforms
Unknown
Default status
Unknown
PLC: XGR-CPUH · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
custom
V1.80
Unavailable
None listed
PLC: XGI-CPUU/UD/H/S/E
Vendor
LS Industrial Systems (LSIS) Co. Ltd LS Electric
Product
PLC: XGI-CPUU/UD/H/S/E
Platforms
Unknown
Default status
Unknown
PLC: XGI-CPUU/UD/H/S/E · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
custom
V3.20
Unavailable
None listed
PLC: XGK-CPUU/H/A/S/E
Vendor
LS Industrial Systems (LSIS) Co. Ltd LS Electric
Product
PLC: XGK-CPUU/H/A/S/E
Platforms
Unknown
Default status
Unknown
PLC: XGK-CPUU/H/A/S/E · Scoped product and version facts