Loxone Miniserver Go Gen 2
3 CVEs affecting Loxone Miniserver Go Gen 2. Latest disclosed: 2023-07-05. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36624 | High | 7.8 | 2023-07-05 | Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration. This allows the e… |
CVE-2023-36623 | High | 7.8 | 2023-07-05 | The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calcula… |
CVE-2023-36622 | High | 7.2 | 2023-07-05 | The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS comman… |