CVE-2023-46381

2023-11-0400:00:00

mitre

www.cve.org

loytec linx-212

lvis-3me12-a1

liob-586

authentication bypass

unauthenticated access

gui control

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.4%

JSON

LOYTEC LINX-212 firmware 6.2.4 and LVIS-3ME12-A1 firmware 6.2.2 and LIOB-586 firmware 6.2.3 devices lack authentication for the preinstalled version of LWEB-802 via an lweb802_pre/ URI. An unauthenticated attacker can edit any project (or create a new project) and control its GUI.