Vendors / Loxone Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now Loxone records in CISA KEV No Loxone vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 69
Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00319 · Published 2023-07-05 · No fix listed CWE-862
Priority HIGH 69
The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00288 · Published 2023-07-05 · No fix listed CWE-798
Priority HIGH 67
The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0137 · Published 2023-07-05 · No fix listed CWE-78
Open these records in search → All records by CVSS severity
1 3 0 0 0
