Lucene search

MitreCVELIST:CVE-2023-46384

HistoryNov 30, 2023 - 12:00 a.m.

CVE-2023-46384

2023-11-3000:00:00

mitre

www.cve.org

loytec

electronics

linx configurator

vulnerable

insecure permissions

cleartext

credential storage

remote attackers

admin password

authentication bypass

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%

JSON

LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authentication to login Loytec device.

References

packetstormsecurity.com/files/175951/Loytec-LINX-Configurator-7.4.10-Insecure-Transit-Cleartext-Secrets.html

seclists.org/fulldisclosure/2023/Nov/6

www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks/