LS ELECTRIC PLC and XG5000
Passwords are not adequately encrypted during the communication process between the XG5000 software and the affected PLC. This could allow an attacker to identify and decrypt the affected PLC 's password by sniffing the traffic. CVE-2022-2758 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).