All packages
Loxone Miniserver Go Gen.2 vulnerabilities
3 known CVE vulnerabilities in Loxone Miniserver Go Gen.2, translated and rated.
- CVE-2023-36624High
Loxone Miniserver Go Gen.2 versions up to 14.0.3.28 allow an authenticated operating system user to escalate privileges via the Sudo configuration. This enables elevated execution of binaries without a password requirement.
- CVE-2023-36623High
The root password of the Loxone Miniserver Go Gen.2 before version 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calculate the root password and escalate privileges.
- CVE-2023-36622High
The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before version 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter.