What’s Vulnerable › Vulnerabilities

CVE-2022-2758: Update

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-31 · updated 2026-06-17
• Weakness: CWE-326

Description

Passwords are not adequately encrypted during the communication process between all versions of LS Industrial Systems (LSIS) Co. Ltd LS Electric XG5000 software prior to V4.0 and LS Electric PLCs: all versions of XGK-CPUU/H/A/S/E prior to V3.50, all versions of XGI-CPUU/UD/H/S/E prior to V3.20, all versions of XGR-CPUH prior to V1.80, all versions of XGB-XBMS prior to V3.00, all versions of XGB-XBCH prior to V1.90, and all versions of XGB-XECH prior to V1.30. This would allow an attacker to identify and decrypt the password of the affected PLCs by sniffing the PLC’s communication traffic.

Affected products

• Ls-Electric Gm7 Firmware: all versions
• Ls-Electric Gm7U Firmware: all versions
• Ls-Electric K120S Firmware: all versions
• Ls-Electric K80S Firmware: all versions
• Ls-Electric Xbc-Dn(P)32U/Dc Firmware: all versions
• Ls-Electric Xbc-Dn(P)32U Firmware: all versions
• Ls-Electric Xbc-Dn(P)32Ua/Dc Firmware: all versions
• Ls-Electric Xbc-Dn(P)32Ua Firmware: all versions
• Ls-Electric Xbc-Dn(P)32Up/Dc Firmware: all versions
• Ls-Electric Xbc-Dn(P)32Up Firmware: all versions
• Ls-Electric Xbc-Dn10E Firmware: all versions
• Ls-Electric Xbc-Dn14E Firmware: all versions
• Ls-Electric Xbc-Dn20E Firmware: all versions
• Ls-Electric Xbc-Dn20Su Firmware: all versions
• Ls-Electric Xbc-Dn30E Firmware: all versions
• Ls-Electric Xbc-Dn30Su Firmware: all versions
• Ls-Electric Xbc-Dn32H/Dc Firmware: all versions
• Ls-Electric Xbc-Dn32H Firmware: all versions
• Ls-Electric Xbc-Dn40Su Firmware: all versions
• Ls-Electric Xbc-Dn60Su Firmware: all versions
• Ls-Electric Xbc-Dn64H/Dc Firmware: all versions
• Ls-Electric Xbc-Dn64H Firmware: all versions
• Ls-Electric Xbc-Dp10E Firmware: all versions
• Ls-Electric Xbc-Dp14E Firmware: all versions
• Ls-Electric Xbc-Dp20E Firmware: all versions
• Ls-Electric Xbc-Dp20Su Firmware: all versions
• Ls-Electric Xbc-Dp30E Firmware: all versions
• Ls-Electric Xbc-Dp30Su Firmware: all versions
• Ls-Electric Xbc-Dp40Su Firmware: all versions
• Ls-Electric Xbc-Dp60Su Firmware: all versions

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-02
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-02

Get alerted when CVE-2022-2758 or the next vulnerability affects your stack