Approved changes feed: RSS · Atom

cpe:2.3:h:ls-electric:xgf-pd2h:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorLs Electric (ea69f4d7-e1cf-5bd0-9db9-b195d7e5ba1b)
ProductXgf Pd2H (0be696dc-a346-5874-9686-3297a4b63457)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2758 not_vulnerable 2026-06-03 14:47:07.103101 Update
MEDIUM (6.5)
Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (LSIS) Co. Ltd LS Electric XG5000 software prior to V4.0 and LS Electric PLCs: all versions of XGK-CPUU/H/A/S/E prior to V3.50, all versions of XGI-CPUU/UD/H/S/E prior to V3.20, all versions of XGR-CPUH prior to V1.80, all versions of XGB-XBMS prior to V3.00, all versions of XGB-XBCH prior to V1.90, and all versions of XGB-XECH prior to V1.30. This would allow an attacker to identify and decrypt the password of the affected PLCs by sniffing the PLC’s communication traffic.
Published: 2022-08-31T15:33:03.944Z
Updated: 2025-04-16T16:11:29.230Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.