Loytec Lvis-3me12-a1 Firmware vulnerabilities

3 CVEs affecting Loytec Lvis-3me12-a1 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-46382, published 2023-11-04.

More from Loytec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-46381, published 2023-11-04. High severity, CVSS 8.2. EPSS: 7.4% chance of exploitation in the next 30 days. LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) lack authentication for the preinstalled version of LWEB-802 via an lweb802_pre/…
• CVE-2023-46382, published 2023-11-04. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) use cleartext HTTP for login.
• CVE-2023-46380, published 2023-11-04. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) send password-change requests via cleartext HTTP.