183 matches found
LOYTEC LINX-212 Security Vulnerability
The LOYTEC LINX-212 is a building controller from LOYTEC. A security vulnerability exists in the LOYTEC LINX-212 version 6.2.4 and LINX-151 version 7.2.4, which stems from an access control error vulnerability in the file dpalconfig.zml. An attacker can exploit the vulnerability to disclose...
CVE-2023-46384
LOYTEC electronics GmbH LINX Configurator all versions is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authentication to login Loytec device...
CVE-2023-46384
CVE-2023-46384 affects LOYTEC electronics LINX Configurator (v7.4.10; and LINX-related components) with insecure permissions that allow cleartext credential storage, enabling remote disclosure of the admin password and bypass of authentication to log in to Loytec devices. Technical details from c...
CVE-2023-46386
LOYTEC LINX-212 and LINX-151 devices (all versions) are affected by CVE-2023-46386 due to insecure permissions in the registry.xml file, which can disclose SMTP client credentials and bypass email authentication. The connected ICS advisory details affected products (LINX-151, LINX-212, LVIS-3ME12...
PT-2023-29992 · Loytec Electronics Gmbh · Linx Configurator
Name of the Vulnerable Software and Affected Versions: LOYTEC electronics GmbH LINX Configurator all versions Description: The issue concerns the use of HTTP Basic Authentication in the LINX Configurator, which transmits usernames and passwords in base64-encoded cleartext. This allows remote...
CVE-2023-46385
LOYTEC electronics GmbH LINX Configurator all versions is vulnerable to Insecure Permissions. An admin credential is passed as a value of URL parameters without encryption, so it allows remote attackers to steal the password and gain full control of Loytec device configuration...
CVE-2023-46387
LOYTEC electronics GmbH LINX-212 and LINX-151 devices all versions are vulnerable to Incorrect Access Control via dpalconfig.zml file. This vulnerability allows remote attackers to disclose sensitive information on Loytec device data point configuration...
CVE-2023-46388
LOYTEC electronics GmbH LINX-212 and LINX-151 devices all versions are vulnerable to Insecure Permissions via dpalconfig.zml file. This vulnerability allows remote attackers to disclose smtp client account credentials and bypass email authentication...
CVE-2023-46388
LOYTEC LINX-212 and LINX-151 devices (all versions) are affected by CVE-2023-46388 due to Insecure Permissions via dpal_config.zml, enabling remote disclosure of SMTP client credentials and bypass of email authentication. The issue is tracked across multiple sources (including Red Hat and CISA IC...
CVE-2023-46389
LOYTEC LINX-212 and LINX-151 devices (all versions) are affected by CVE-2023-46389 due to Incorrect Access Control via the registry.xml file, enabling remote disclosure of sensitive configuration data. The ICS advisory lists affected products (LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580...
LOYTEC electronics GmbH LINX Configurator Security Breach
LOYTEC electronics GmbH LINX Configurator is a tool from the Austrian company LOYTEC electronics GmbH for configuring and managing devices on its LINX platform. A security vulnerability in LOYTEC electronics GmbH LINX Configurator version 7.4.10, which stems from the failure to encrypt the...
LOYTEC LINX-212 Security Vulnerability
The LOYTEC LINX-212 is a building controller from LOYTEC. A security vulnerability exists in the LOYTEC LINX-212 version 6.2.4 and LINX-151 version 7.2.4, which originated from a vulnerability that allows an attacker to disclose smtp client account credentials and bypass email authentication via...
LOYTEC LINX-212 Security Vulnerability
The LOYTEC LINX-212 is a building controller from LOYTEC. A security vulnerability exists in the LOYTEC LINX-212 version 6.2.4 and LINX-151 version 7.2.4, which stems from a vulnerability that allows an attacker to disclose smtp client account credentials and bypass email authentication via the...
Loytec L-INX Automation Servers Information Disclosure / Cleartext Secrets
CVE : CVE-2023-46386, CVE-2023-46387, CVE-2023-46388, CVE-2023-46389 + Title : Multiple vulnerabilities in Loytec L-INX Automation Servers + Vendor : LOYTEC electronics GmbH + Affected Products : LINX-151, Firmware 7.2.4, LINX-212, firmware 6.2.4 + Affected Components : L-INX Automation Servers +...
Loytec LINX Configurator 7.4.10 Insecure Transit / Cleartext Secrets
CVE : CVE-2023-46383, CVE-2023-46384, CVE-2023-46385 + Title : Multiple vulnerabilities in Loytec LINX Configurator + Vendor : LOYTEC electronics GmbH + Affected Products : LINX Configurator 7.4.10 + Affected Components : LINX Configurator + Discovery Date : 01-Sep-2021 + Publication date :...
Loytec LINX Automation Servers Information Disclosure / Cleartext Secrets Vulnerability
Loytec LINX-151 with firmware version 7.2.4 and LINX-212 with firmware version 6.2.4 suffer from file disclosure vulnerabilities that leak secrets as well as issues with stories secrets in the clear. + CVE : CVE-2023-46386, CVE-2023-46387, CVE-2023-46388, CVE-2023-46389 + Title : Multiple...
Loytec LINX Configurator 7.4.10 Insecure Transit / Cleartext Secrets Vulnerability
CVE : CVE-2023-46383, CVE-2023-46384, CVE-2023-46385 + Title : Multiple vulnerabilities in Loytec LINX Configurator + Vendor : LOYTEC electronics GmbH + Affected Products : LINX Configurator 7.4.10 + Affected Components : LINX Configurator + Discovery Date : 01-Sep-2021 + Publication date :...
VulnCheck KEV: CVE-2018-14918
LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal...
LOYTEC Electronics Insecure Transit / Insecure Permissions / Unauthenticated Access
CVE : CVE-2023-46380, CVE-2023-46381, CVE-2023-46382 + Title : Multiple vulnerabilities in Loytec LWEB-802, L-INX Automation Servers, L-IOB I/O Controllers, L-VIS Touch Panels + Vendor : LOYTEC electronics GmbH + Affected Products : LINX-212 firmware 6.2.4, LVIS-3ME12-A1 firmware 6.2.2, LIOB-586...
