CVE-2023-46385

LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions

published November 30, 2023

CVSS
—
EPSS
1%
Percentile
54.6
In the wild
Unconfirmed
What it is

LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. An admin credential is passed as a value of URL parameters without encryption, so it allows remote attackers to steal the password and gain full control of Loytec device configuration.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00755 · 54.6th percentile
Published
2023-11-30T00:00Z
EPSS history
Timeline
  • 30 NOV 00:00Z
    LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions
    cvelistv5