233 matches found
CVE-2023-46380
LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices all versions send password-change requests via cleartext HTTP...
CVE-2023-46380
LOYTEC LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588 and L-INX Configurator devices (all versions) are affected by CVE-2023-46380 due to password-change requests being sent in cleartext via HTTP. This enables potential password disclosure over the network (and, per rel...
CVE-2023-46381
CVE-2023-46381 affects LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, and L-INX Configurator devices . The vulnerability is missing authentication for the preinstalled version of LWEB-802 via the lweb802_pre/ URI , allowing an unauthenticated attacker to edit any proje...
CVE-2023-46381
LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices all versions lack authentication for the preinstalled version of LWEB-802 via an lweb802pre/ URI. An unauthenticated attacker can edit any project or create a new project and control its GUI...
LOYTEC LINX-212 Access Control Error Vulnerability
The LOYTEC LINX-212 is a building controller from LOYTEC. An access control error vulnerability exists in the LOYTEC LINX-212 6.2.4 firmware version, which stems from a lack of authentication on the Web user interface, and can be exploited by an attacker to edit or delete current Web items, chang...
PT-2023-29990 · Loytec · Linx Configurator +7
Name of the Vulnerable Software and Affected Versions: LOYTEC LINX-151 affected versions not specified LOYTEC LINX-212 version 6.2.4 LOYTEC LVIS-3ME12-A1 version 6.2.2 LOYTEC LIOB-586 version 6.2.3 LOYTEC LIOB-580 V2 affected versions not specified LOYTEC LIOB-588 affected versions not specified...
CVE-2023-46380: Cleartext Transmission of Sensitive Information
LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices all versions send password-change requests via cleartext HTTP...
CVE-2023-46382: Cleartext Transmission of Sensitive Information
LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices all versions use cleartext HTTP for login...
CVE-2023-46382
CVE-2023-46382 affects LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, and L-INX Configurator devices (all versions) with cleartext HTTP login. The connected ICS advisory confirms remote exploitation potential via unencrypted credentials and lists affected firmware for ...
CVE-2023-46381
LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices all versions lack authentication for the preinstalled version of LWEB-802 via an lweb802pre/ URI. An unauthenticated attacker can edit any project or create a new project and control its GUI...
CVE-2023-46381: Missing Authentication for Critical Function
LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices all versions lack authentication for the preinstalled version of LWEB-802 via an lweb802pre/ URI. An unauthenticated attacker can edit any project or create a new project and control its GUI...
CVE-2018-14918
LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal...
CVE-2018-14916
LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion...
CVE-2018-14918
LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal...
Directory traversal
LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal...
Arbitrary file deletion
LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion...
CVE-2018-14916
Loytec LGATE-902 (pre-6.4.2) is affected by a local file inclusion vulnerability (CVE-2018-14916). The Nuclei template specifies versions prior to 6.4.2 as vulnerable, enabling an attacker to read sensitive files on the device. The CVE description notes arbitrary file deletion as associated risk....
CVE-2018-14916
LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion...