CVE-2023-46385

2023-11-3000:00:00

mitre

www.cve.org

cve-2023-46385

insecure permissions

admin credential

url parameters

remote attackers

password theft

loytec device configuration

0.001 Low

EPSS

Percentile

41.4%

JSON

LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Insecure Permissions. An admin credential is passed as a value of URL parameters without encryption, so it allows remote attackers to steal the password and gain full control of Loytec device configuration.