CVE-2023-46383
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-46383 is a cyber vulnerability affecting LOYTEC electronics GmbH LINX Configurator 7.4.10. The vulnerability stems from the use of HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext. This allows remote attackers to steal the password and gain full control of Loytec device configuration. The vulnerability has a base severity rating of HIGH, with a base score of 7.5 out of 10. It poses a high risk to organizations as it allows unauthorized access to sensitive information and potential manipulation of device configurations. To remediate this vulnerability, it is recommended to update the LINX Configurator to a secure version that implements more robust authentication mechanisms.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions