CVE-2023-36623

Summary

CVE-2023-36623 is a vulnerability affecting the Loxone Miniserver Go Gen.2 before version 14.2. The issue arises due to the use of hard-coded secrets and the MAC address in calculating the root password. This allows a local user to determine the password, enabling them to escalate privileges and potentially gain unauthorized access to the system. This vulnerability poses a significant risk to the security of impacted installations and requires immediate attention from users to apply the necessary patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.