CVE-2023-46385 Information

Description

LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Insecure Permissions. An admin credential is passed as a value of URL parameters without encryption so it allows remote attackers to steal the password and gain full control of Loytec device configuration.

Reference

https://seclists.org/fulldisclosure/2023/Nov/6 https://packetstormsecurity.com/files/175951/Loytec-LINX-Configurator-7.4.10-Insecure-Transit-Cleartext-Secrets.html