Loytec L-Inx Configurator vulnerabilities

3 CVEs affecting Loytec L-Inx Configurator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-46385, published 2023-11-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-46384, published 2023-11-30. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an…
CVE-2023-46383, published 2023-11-30. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. LOYTEC electronics GmbH LINX Configurator (all versions) uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the…
CVE-2023-46385, published 2023-11-30. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. An admin credential is passed as a value of URL parameters without encryption, so it allows remote…