Loxone

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Loxone records in CISA KEV

No Loxone vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Miniserver Go Gen 2 Firmware 3 records HIGH Miniserver Gen 1 Firmware 1 record MEDIUM

Records

4 records

TI-2023-18444 CVE-2023-36624 · GHSA-fp83-jj4g-63h8

Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system…

HIGH 69

Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00319 Published 2023-07-05 No fix listed CWE-862

TI-2023-18443 CVE-2023-36623 · GHSA-g663-855h-mmr7

The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using…

HIGH 69

The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00288 Published 2023-07-05 No fix listed CWE-798

TI-2023-18442 CVE-2023-36622 · GHSA-52rm-ch56-6jhr

The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9…

HIGH 67

The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0137 Published 2023-07-05 No fix listed CWE-78

TI-2020-16680 CVE-2020-27488 · GHSA-gx5r-j32f-r3vc

Loxone Miniserver devices with firmware before 11.1 (aka 11.1.9.3) are unable to use an…

MEDIUM 46

Loxone Miniserver devices with firmware before 11.1 (aka 11.1.9.3) are unable to use an authentication method that is based on the "signature of the update package." Therefore, these devices (or attackers who are spoofin…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01986 Published 2021-01-13 No fix listed CWE-287

Open these records in search →

Critical	1
High	3
Medium	0
Low	0
No CVSS	0