CVE-2023-36622

The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS…

published July 5, 2023

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01370 · 71.7th percentile
Published
2023-07-05T00:00Z
EPSS history
Timeline
  • 05 JUL 00:00Z
    The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS…
    cvelistv5