Skip to content
Noroxi

Loytec records

18 published records for vendor loytec.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

18 records
  • CVE-2018-14916
    41Plan

    LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion.

    CriticalCVSS 9.1Proof of conceptEPSS 17%

    loytec · lgate-902 firmwareJun 28, 2019

  • CVE-2015-7906
    41Plan

    LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 devices allow remote attackers to read a password-hash backup file via unspecifi

    CriticalCVSS 10.0No exploitEPSS 2%

    loytec · l-switch and l-ip firmwareDec 21, 2015

  • CVE-2018-14918
    36Monitor

    LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal.

    HighCVSS 7.5Proof of conceptEPSS 18%

    loytec · lgate-902 firmwareJun 28, 2019

  • CVE-2017-13996
    36Monitor

    A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0.

    HighCVSS 8.8No exploitEPSS 2%

    loytec · lvis-3me firmwareOct 5, 2017

  • CVE-2023-46381
    35Monitor

    LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) lack authentication for

    HighCVSS 8.2No exploitEPSS 9%

    loytec · linx-212 firmwareNov 4, 2023

  • CVE-2017-13992
    33Monitor

    An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0.

    HighCVSS 8.1No exploitEPSS 3%

    loytec · lvis-3me firmwareOct 5, 2017

  • CVE-2023-46382
    31Monitor

    LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) use cleartext HTTP for

    HighCVSS 7.5No exploitEPSS 3%

    loytec · linx-212 firmwareNov 4, 2023

  • CVE-2023-46380
    31Monitor

    LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) send password-change re

    HighCVSS 7.5No exploitEPSS 3%

    loytec · linx-212 firmwareNov 4, 2023

  • CVE-2023-46389
    31Monitor

    LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via registry.xml file.

    HighCVSS 7.5No exploitEPSS 1%

    loytec · linx-212 firmwareNov 30, 2023

  • CVE-2023-46387
    31Monitor

    LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via dpal_config.zml file.

    HighCVSS 7.5No exploitEPSS 1%

    loytec · linx-212 firmwareNov 30, 2023

  • CVE-2023-46386
    30Monitor

    LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via registry.xml file.

    HighCVSS 7.5No exploitEPSS 1%

    loytec · linx-212 firmwareNov 30, 2023

  • CVE-2023-46388
    30Monitor

    LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via dpal_config.zml file.

    HighCVSS 7.5No exploitEPSS 1%

    loytec · linx-212 firmwareNov 30, 2023

  • CVE-2023-46384
    30Monitor

    LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions.

    HighCVSS 7.5No exploitEPSS 1%

    loytec · l-inx configuratorNov 30, 2023

  • CVE-2023-46383
    30Monitor

    LOYTEC electronics GmbH LINX Configurator (all versions) uses HTTP Basic Authentication, which transmits usernames and passwords in base64-e

    HighCVSS 7.5No exploitEPSS 1%

    loytec · l-inx configuratorNov 30, 2023

  • CVE-2017-13998
    30Monitor

    An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0.

    HighCVSS 7.5No exploitEPSS 1%

    loytec · lvis-3me firmwareOct 5, 2017

  • CVE-2023-46385
    30Monitor

    LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions.

    HighCVSS 7.5No exploitEPSS 0%

    loytec · l-inx configuratorNov 30, 2023

  • CVE-2018-14919
    24Monitor

    LOYTEC LGATE-902 6.3.2 devices allow XSS.

    MediumCVSS 6.1No exploitEPSS 1%

    loytec · lgate-902 firmwareJun 28, 2019

  • CVE-2017-13994
    24Monitor

    A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0.

    MediumCVSS 6.1No exploitEPSS 0%

    loytec · lvis-3me firmwareOct 5, 2017