GCVE - cpe:2.3:a:loytec:l-roc:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:loytec:l-roc:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Loytec (`6190caa2-852a-5dba-b6c8-40e7b31c6b3d`)
Product	L Roc (`66408357-fcc7-53b6-aad4-844d1460f760`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-55732`	vulnerable	2026-07-29 01:00:28.597659	Loytec LINX firmware: Out-of-bounds Read in BACnet packet parsing (bacdt_datetime_to_tod) Out-of-bounds Read (CWE-125) in BACnet packet parsing (`bacdt_datetime_to_tod`) in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64 allows an unauthenticated remote attacker to crash `linx_a64.exe` and ultimately reboot the device via a malformed BACnet TimeSynchronization or UTC-TimeSynchronization packet with an invalid month value. The same vulnerability affects multiple other Loytec products. Published: 2026-07-24T14:00:48.771Z Updated: 2026-07-24T14:53:49.184Z Open on db.gcve.eu Reference links https://www.loytec.com/support/product-security/advisories/8532-dibt-cve-20260608-0001-bacnet-crash-due-to-invalid-timesync-message-high	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-55731`	vulnerable	2026-07-29 01:00:28.596893	Loytec LINX firmware: Unchecked input for loop condition in the SNMP agent Unchecked input for loop condition (CWE-606) in the SNMP agent in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to cause persistent denial of service (CPU exhaustion) via a crafted SNMP GETNEXT request with a large OID component. Published: 2026-07-24T14:00:30.497Z Updated: 2026-07-24T14:54:34.007Z Open on db.gcve.eu Reference links https://www.loytec.com/support/product-security/advisories/8531-dibt-cve-20260601-0003-unchecked-input-for-loop-condition-cwe-606-in-the-snmp-agent-medium	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-55728`	vulnerable	2026-07-29 01:00:28.585505	Loytec LINX firmware: Stack-based Buffer Overflow in cmd_ipaddr_conflict Stack-based Buffer Overflow (CWE-121) in `/usr/bin/ltsudo` `cmd_ipaddr_conflict` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a `superadmin`-group attacker to trigger a SUID-root process abort or potentially elevate privileges via an overly long interface-name argument. Published: 2026-07-24T13:58:35.474Z Updated: 2026-07-24T14:56:40.020Z Open on db.gcve.eu Reference links https://www.loytec.com/support/product-security/advisories/8523-dibt-cve-20260526-0005-stack-buffer-overflow-in-cmd_ipaddr_conflict-low	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-12504`	vulnerable	2026-07-29 00:23:32.384462	Loytec LINX firmware: Improper Authentication in PAM configuration Improper Authentication (CWE-287) in the PAM configuration in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a local attacker to authenticate as a uid=0 account without a password and obtain a root shell via an `/etc/passwd` entry with an empty password field. Published: 2026-07-24T13:58:16.232Z Updated: 2026-07-24T14:57:20.563Z Open on db.gcve.eu Reference links https://www.loytec.com/support/product-security/advisories/8521-dibt-cve-20260526-0003-pam-passwordless-uid-0-authentication-high	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.