Miniserver Go Gen 2 Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:loxone:miniserver_go_gen_2_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorLoxone (0ecb0bfb-30ee-52ce-961d-d3c4e11cc5c4)
ProductMiniserver Go Gen 2 Firmware (5689455e-d6b8-59ae-9641-3728e45b6ec4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-36624 vulnerable 2026-06-08 06:08:12.755547 Details available
Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration. This allows the elevated execution of binaries without a password requirement.
Published: 2023-07-05T00:00:00.000Z
Updated: 2024-11-21T14:42:49.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36623 vulnerable 2026-06-08 06:08:12.754901 Details available
The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calculate the root password and escalate privileges.
Published: 2023-07-05T00:00:00.000Z
Updated: 2024-11-21T14:58:53.779Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36622 vulnerable 2026-06-08 06:08:12.754066 Details available
The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter.
Published: 2023-07-05T00:00:00.000Z
Updated: 2024-11-21T15:00:56.787Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.