HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2023-46380

CVSS 7.5v3.1pub. 2023-11-04upd. 2025-11-04

LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) send password-change requests via cleartext HTTP.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Loytec Linx 212

    HW
    Loytec
    wszystkie wersje

  • Loytec Linx 212 Firmware

    OS
    Loytec
    6.2.4

  • Loytec Liob 586

    HW
    Loytec
    wszystkie wersje

  • Loytec Liob 586 Firmware

    OS
    Loytec
    6.2.3

  • Loytec Lvis 3me12 A1

    HW
    Loytec
    wszystkie wersje

  • Loytec Lvis 3me12 A1 Firmware

    OS
    Loytec
    6.2.2
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2023-46386HIGH7.5ten sam produkt

LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions vi...

CVE-2023-46387HIGH7.5ten sam produkt

LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Contro...

CVE-2023-46388HIGH7.5ten sam produkt

LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions vi...

CVE-2023-46389HIGH7.5ten sam produkt

LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Contro...

CVE-2023-46381HIGH8.2ten sam produkt

LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all ver...