CVE-2023-46385

Publication date

2023-11-30 00:00:00

Family

mitre

State

PUBLISHED

Description

LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. An admin credential is passed as a value of URL parameters without encryption, so it allows remote attackers to steal the password and gain full control of Loytec device configuration.