LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via dpal_config.zml file. This vulnerability allows remote attackers to disclose sensitive information on Loytec device data point configuration.
References
Configurations
History
20 Sep 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via dpal_config.zml file. This vulnerability allows remote attackers to disclose sensitive information on Loytec device data point configuration. | |
| References |
|
14 Dec 2023, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
06 Dec 2023, 18:42
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | NVD-CWE-Other | |
| First Time |
Loytec linx-151 Firmware
Loytec linx-212 Loytec Loytec linx-212 Firmware Loytec linx-151 |
|
| CPE | cpe:2.3:h:loytec:linx-212:-:*:*:*:*:*:*:* cpe:2.3:o:loytec:linx-212_firmware:6.2.4:*:*:*:*:*:*:* cpe:2.3:o:loytec:linx-151_firmware:7.2.4:*:*:*:*:*:*:* cpe:2.3:h:loytec:linx-151:-:*:*:*:*:*:*:* |
|
| References | () http://seclists.org/fulldisclosure/2023/Nov/7 - Mailing List, Third Party Advisory | |
| References | () http://packetstormsecurity.com/files/175952/Loytec-L-INX-Automation-Servers-Information-Disclosure-Cleartext-Secrets.html - Third Party Advisory, VDB Entry |
30 Nov 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-30 23:15
Updated : 2024-09-20 17:15
NVD link : CVE-2023-46387
Mitre link : CVE-2023-46387
CVE.ORG link : CVE-2023-46387
JSON object : View
Products Affected
loytec
- linx-151
- linx-151_firmware
- linx-212_firmware
- linx-212
CWE