CVE-2023-46383

2023-11-3000:00:00

mitre

www.cve.org

cve-2023-46383

loytec electronics

http basic authentication

remote attackers

password theft

device configuration

0.001 Low

EPSS

Percentile

35.3%

JSON

LOYTEC electronics GmbH LINX Configurator 7.4.10 uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the password and gain full control of Loytec device configuration.