CVE-2023-46380

Summary

CVE-2023-46380 refers to a vulnerability impacting LOYTEC's LINX-212 firmware version 6.2.4, LVIS-3ME12-A1 firmware version 6.2.2, and LIOB-586 firmware version 6.2.3 devices. This issue allows for cleartext transmission of password-change requests over HTTP, making it easier for attackers to intercept and steal user credentials during the password modification process. This vulnerability poses a significant risk to organizations using these devices and could result in unauthorized access to their systems. It is recommended that affected organizations upgrade to the latest firmware versions or implement additional security measures to protect against potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.