183 matches found
CVE-2017-13998
An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not sufficiently protect sensitive information from unauthorized access...
CVE-2017-13994
A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper web request validation, which could allow XSS attacks to occur if an authenticated user of the web interface is tricked into clicking a malicious link...
CVE-2017-13992
An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution...
Path traversal
A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web user interface fails to prevent access to critical files that non administrative users should not have access to, which could allow an attacker to create or modify files or execute arbitrary code...
CVE-2017-13996
CVE-2017-13996 affects LOYTEC LVIS-3ME web UI prior to firmware 6.2.0. The vulnerability is a Relative Path Traversal in the LVIS-3ME interface, which can allow access to sensitive files and potentially enable an attacker to create/modify files or execute arbitrary code. Affected product: LVIS-3M...
CVE-2017-13998
CVE-2017-13998 concerns LOYTEC LVIS-3ME before firmware 6.2.0, where the web interface fails to sufficiently protect sensitive information, enabling potential unauthorized access. Affected product: LVIS-3ME; vulnerable component: credentials handling in the web interface; root cause: insufficient...
CVE-2017-13994
A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper web request validation, which could allow XSS attacks to occur if an authenticated user of the web interface is tricked into clicking a malicious link...
CVE-2017-13992
An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution...
CVE-2017-13992
The CVE-2017-13992 entry documents an Insufficient Entropy issue in LOYTEC LVIS-3ME, affected in versions prior to 6.2.0. The web interface authentication relies on weak RNG, which could enable remote code execution. Several sources (NVD, CVE listing, CNVD, PRION, etc.) confirm the issue and link...
CVE-2017-13994
LOYTEC LVIS-3ME web interface (versions
CVE-2017-13996
A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web user interface fails to prevent access to critical files that non administrative users should not have access to, which could allow an attacker to create or modify files or execute arbitrary code...
CVE-2017-13998
An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not sufficiently protect sensitive information from unauthorized access...
LOYTEC LVIS-3ME Unauthorized Access Vulnerability
LVIS-3ME is a graphical user interface from LOYTEC. An unauthorized access vulnerability exists in LOYTEC LVIS-3ME versions prior to 6.2.0, which can be exploited by an attacker to gain unauthorized access because the program fails to adequately protect sensitive information data...
LOYTEC LVIS-3ME Remote Code Execution Vulnerability
LVIS-3ME is a graphical user interface from LOYTEC. A remote code execution vulnerability exists in LOYTEC LVIS-3ME versions prior to 6.2.0, which can be exploited by an attacker to remotely execute arbitrary code due to the application's failure to utilize a sufficiently random number to generat...
LOYTEC LVIS-3ME Cross-Site Scripting Vulnerability
LVIS-3ME is a graphical user interface from LOYTEC. A cross-site scripting vulnerability exists in LOYTEC LVIS-3ME versions prior to 6.2.0, which can be exploited by an attacker to conduct a cross-site scripting attack due to a lack of proper web request authentication in the web interface, if an...
LOYTEC LVIS-3ME
CVSS v3 8.1 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: LOYTEC Equipment: LVIS-3ME Vulnerabilities: Relative Path Traversal, Insufficient Entropy, Cross-site Scripting, Insufficiently Protected Credentials AFFECTED PRODUCTS The following versions of LVIS-3ME, an HMI Touch...
LOYTEC LIP-3ECTB-100 LVIS-3E100LIP-ME201 devices Information Disclosure Vulnerability
LOYTEC LIP devices are IP network router devices from LOYTEC Germany. An information disclosure vulnerability exists in the LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100,LIP-ME201 devices. Allows a remote attacker to read a backup file of password hashes via an unspecified vector...
CVE-2015-7906
LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 devices allow remote attackers to read a password-hash backup file via unspecified vectors...
