CVE-2023-46383 Information

Description

LOYTEC electronics GmbH LINX Configurator 7.4.10 uses HTTP Basic Authentication which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the password and gain full control of Loytec device configuration.

Reference

https://seclists.org/fulldisclosure/2023/Nov/6 https://packetstormsecurity.com/files/175951/Loytec-LINX-Configurator-7.4.10-Insecure-Transit-Cleartext-Secrets.html