{"id":"CVE-2023-46384","aliases":["EUVD-2023-50604","GHSA-9vjx-qhgp-wfvm"],"status":"published","title":"LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Insecure Permissions. Cleartext...","description":"LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authentication to login Loytec device.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01522,"percentile":0.74796,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-312"],"published":"2023-11-30T00:00:00Z","modified":"2026-06-17T06:30:46Z","products":[{"vendor":"loytec","product":"l-inx_configurator"}],"references":[{"url":"https://seclists.org/fulldisclosure/2023/Nov/6","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://packetstormsecurity.com/files/175951/Loytec-LINX-Configurator-7.4.10-Insecure-Transit-Cleartext-Secrets.html","tags":["x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks/","tags":["x_transferred"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01"},{"url":"http://seclists.org/fulldisclosure/2023/Nov/6"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46384"},{"url":"https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks"},{"url":"https://github.com/advisories/GHSA-9vjx-qhgp-wfvm"}],"sources":{"cve":[{"id":"CVE-2023-46384","description":"LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authentication to login Loytec device.","status":"published","published":"2023-11-30T00:00:00Z","modified":"2025-11-04T19:25:39.442Z","updated_at":"2026-11-02T14:35:23.309349Z"}],"euvd":[{"id":"EUVD-2023-50604","description":"LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authentication to login Loytec device.","status":"published","published":"2023-11-30T00:00:00Z","modified":"2025-11-04T19:25:39Z","updated_at":"2026-11-02T19:49:21.645169Z"}],"ghsa":[{"id":"GHSA-9vjx-qhgp-wfvm","title":"LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Insecure Permissions. Cleartext...","description":"LOYTEC electronics GmbH LINX Configurator 7.4.10 is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authentication to login Loytec device.","status":"published","published":"2023-12-01T00:31:00Z","modified":"2025-11-04T21:30:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-312"],"updated_at":"2026-11-02T15:04:36.009389Z"}],"nvd":[{"id":"CVE-2023-46384","description":"LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authentication to login Loytec device.","status":"published","published":"2023-11-30T23:15:07.423Z","modified":"2026-06-17T06:30:46.553Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-312"],"updated_at":"2026-11-02T14:08:52.544469Z"}]}}