Approved changes feed: RSS · Atom

cpe:2.3:o:loytec:linx-212_firmware:6.2.4:*:*:*:*:*:*:*

part: o version: 6.2.4 update: *

VendorLoytec (6190caa2-852a-5dba-b6c8-40e7b31c6b3d)
ProductLinx 212 Firmware (ae935adf-b34a-589e-9bdf-78d7d7dc35fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46389 vulnerable 2026-06-03 14:53:10.007325 Details available
LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via registry.xml file. This vulnerability allows remote attackers to disclose sensitive information on LINX configuration.
Published: 2023-11-30T00:00:00.000Z
Updated: 2024-09-20T16:48:00.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46388 vulnerable 2026-06-03 14:53:10.006982 Details available
LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via dpal_config.zml file. This vulnerability allows remote attackers to disclose smtp client account credentials and bypass email authentication.
Published: 2023-11-30T00:00:00.000Z
Updated: 2024-09-20T16:46:38.362Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46387 vulnerable 2026-06-03 14:53:10.006619 Details available
LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via dpal_config.zml file. This vulnerability allows remote attackers to disclose sensitive information on Loytec device data point configuration.
Published: 2023-11-30T00:00:00.000Z
Updated: 2024-11-26T19:22:17.670Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46386 vulnerable 2026-06-03 14:53:10.004730 Details available
LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via registry.xml file. This vulnerability allows remote attackers to disclose smtp client account credentials and bypass email authentication.
Published: 2023-11-30T00:00:00.000Z
Updated: 2024-09-20T16:43:34.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46382 vulnerable 2026-06-03 14:53:10.000892 Details available
LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) use cleartext HTTP for login.
Published: 2023-11-04T00:00:00.000Z
Updated: 2025-11-04T19:25:37.303Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46381 vulnerable 2026-06-03 14:53:10.000471 Details available
LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) lack authentication for the preinstalled version of LWEB-802 via an lweb802_pre/ URI. An unauthenticated attacker can edit any project (or create a new project) and control its GUI.
Published: 2023-11-04T00:00:00.000Z
Updated: 2025-11-04T19:25:36.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46380 vulnerable 2026-06-03 14:53:09.998116 Details available
LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) send password-change requests via cleartext HTTP.
Published: 2023-11-04T00:00:00.000Z
Updated: 2025-11-04T19:25:35.144Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.