HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2023-46384

CVSS 7.5v3.1pub. 2023-11-30upd. 2025-11-04

LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authentication to login Loytec device.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Loytec L Inx Configurator

    APP
    Loytec
    7.4.10
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2023-46383HIGH7.5same product

LOYTEC electronics GmbH LINX Configurator (all versions) uses HTTP Basic Authentication, which transmits usern...

CVE-2023-46385HIGH7.5same product

LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. An admin crede...

CVE-2018-14916CRITICAL9.1PL ✓same vendor

Loytec LGATE-902 — dowolne usuwanie plików przez sieć

CVE-2023-46386HIGH7.5same vendor

LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions vi...

CVE-2023-46387HIGH7.5same vendor

LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Contro...