Advisories · Technology
Loytec L-VIS.
Every CVE that names Loytec L-VIS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Loytec LINX firmware: Out-of-bounds Read in BACnet packet parsing (bacdt_datetime_to_tod)
- Loytec LIP-ME20xC
- Loytec L-INX
- Memory corruption
- CVSS 6.6 Medium
Loytec LINX firmware: Unchecked input for loop condition in the SNMP agent
- Loytec LIP-ME20xC
- Loytec L-INX
- CWE-606
- CVSS 3.8 Low
Loytec LINX firmware: Stack-based Buffer Overflow in cmd_ipaddr_conflict
- Loytec LIP-ME20xC
- Loytec L-INX
- Memory corruption
- CVSS 8.4 High
Loytec LINX firmware: Improper Authentication in PAM configuration
- Loytec LIP-ME20xC
- Loytec L-INX
- Authentication bypass
- Hard-coded credentials
- CVSS 9.2 CriticalCritical · CVSS 9+
Loytec LINX firmware: Improper Link Resolution in /usr/bin/larm_starter
- Loytec LIP-ME20xC
- Loytec L-INX
- Path traversal
- CVSS 8.4 High
Loytec LINX firmware: Improper Privilege Management in /usr/bin/ltsudo
- Loytec LIP-ME20xC
- Loytec L-INX
- Privilege escalation
- CVSS 8.7 High
Loytec LINX firmware: Unauthenticated stored XSS in OPC XML-DA server
- Loytec LIP-ME20xC
- Loytec L-INX
- Cross-site scripting (XSS)
- CWE-116