CVE-2023-46384

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authentication to login Loytec device.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

No affected versions have been published.

Timeline

Published: Nov 30, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-463857.5LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. An admin credential is passed as a value of CVE-2023-463867.5LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via registry.xml file. This vuln CVE-2023-463877.5LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via dpal_config.zml file. Th CVE-2023-463887.5LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via dpal_config.zml file. This v CVE-2023-463897.5LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via registry.xml file. This CVE-2023-46397.4A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue cou CVE-2023-463937.5gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' pass CVE-2023-463945.4A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web s CVE-2023-463965.4Audimex 15.0.0 is vulnerable to Cross Site Scripting (XSS) in /audimex/cgi-bin/wal.fcgi via company parameter search filters.CVE-2023-46407.5The controller responsible for setting the logging level does not include any authorization checks to ensure the user is authenticated. This CVE-2023-464009.8KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function.CVE-2023-464019.8KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function.