Loytec

27 CVEs across 27 Loytec products. Browse Loytec vulnerabilities, severities, and proof-of-concept exploits.

Loytec products with known CVEs

ProductCVEs
L-Dali7
L-Gate7
L-Inx7
Linx-2127
Linx-212 Firmware7
L-Iob7
Lip-Me20xc7
L-Pad7
L-Roc7
L-Vis7
Linx-1514
Linx-151 Firmware4
Lvis-3me4
Lvis-3me Firmware4
Lgate-9023
Lgate-902 Firmware3
L-Inx Configurator3
Liob-5863
Liob-586 Firmware3
Lvis-3me12-A13
Lvis-3me12-A1 Firmware3
Lweb-8022
Linx-1001
Lip-3ectb1
Lip-Me2011
L-Switch And L-Ip Firmware1
Lvis-3e1001
Loytec CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-557322026-07-24Out-of-bounds Read (CWE-125) in BACnet packet parsing (`bacdt_datetime_to_tod`) in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD thro…
CVE-2026-557312026-07-24Unchecked input for loop condition (CWE-606) in the SNMP agent in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LIN…
CVE-2026-557302026-07-24Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to execute arbitr…
CVE-2026-557292026-07-24Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote…
CVE-2026-557282026-07-24Stack-based Buffer Overflow (CWE-121) in `/usr/bin/ltsudo` `cmd_ipaddr_conflict` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD th…
CVE-2026-125042026-07-24Improper Authentication (CWE-287) in the PAM configuration in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A6…
CVE-2026-125032026-07-24Improper Link Resolution (CWE-59) in `/usr/bin/larm_starter` in Loytec L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a…
CVE-2026-125022026-07-24Improper Privilege Management (CWE-269) in `/usr/bin/ltsudo` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-…
CVE-2026-124962026-07-24Stored Cross-Site Scripting (CWE-79) in the OPC XML-DA server statistics in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4…
CVE-2023-46389High7.52023-11-30LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via registry.xml file. This vulnerability allow…
CVE-2023-46388High7.52023-11-30LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via dpal_config.zml file. This vulnerability allows…
CVE-2023-46387High7.52023-11-30LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via dpal_config.zml file. This vulnerability al…
CVE-2023-46386High7.52023-11-30LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via registry.xml file. This vulnerability allows re…
CVE-2023-46385High7.52023-11-30LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. An admin credential is passed as a value of URL parameters with…
CVE-2023-46384High7.52023-11-30LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to dis…
CVE-2023-46383High7.52023-11-30LOYTEC electronics GmbH LINX Configurator (all versions) uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext an…
CVE-2023-46382High7.52023-11-04LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) use cleartext HTTP for login.
CVE-2023-46381High8.22023-11-04LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) lack authentication for the preinstalled v…
CVE-2023-46380High7.52023-11-04LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) send password-change requests via cleartex…
CVE-2018-14918High7.52019-06-28LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal.
CVE-2018-14916Critical9.12019-06-28LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion.
CVE-2018-14919Medium6.12019-06-28LOYTEC LGATE-902 6.3.2 devices allow XSS.
CVE-2017-13998High7.52017-10-05An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not sufficiently protect sensitiv…
CVE-2017-13996High8.82017-10-05A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web user interface fails to prevent access to critical files tha…
CVE-2017-13994Medium6.12017-10-05A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper web request validation, which could allo…
CVE-2017-13992High8.12017-10-05An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation…
CVE-2015-79062015-12-21LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 devices allow remote attackers to read a password-hash backup file via unspecified vectors.