Vulnerabilities

TI-2023-18444 CVE-2023-36624 · GHSA-fp83-jj4g-63h8

Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system…

HIGH 69

Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00319 Published 2023-07-05 No fix listed CWE-862

TI-2023-18443 CVE-2023-36623 · GHSA-g663-855h-mmr7

The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using…

HIGH 69

The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00288 Published 2023-07-05 No fix listed CWE-798

TI-2023-18442 CVE-2023-36622 · GHSA-52rm-ch56-6jhr

The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9…

HIGH 67

The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0137 Published 2023-07-05 No fix listed CWE-78

Vulnerabilities

Filters

Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system…

The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using…

The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9…