CVE-2023-46383 Weak cryptography in n/a
Remote attackers can intercept base64-encoded credentials to steal passwords and gain full control of LOYTEC device configurations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-46383?
CVE-2023-46383 is a high-severity vulnerability in n/a, published on 30 Nov 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
LOYTEC electronics GmbH LINX Configurator (all versions) uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the password and gain full control of Loytec device configuration.
Weakness: CWE-319
Which versions are affected by CVE-2023-46383?
It affects 1 product.
Products include Loytec L-Inx Configurator.
How do I fix CVE-2023-46383?
No fix has been published for CVE-2023-46383 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-46383 being exploited?
There is no known exploitation of CVE-2023-46383 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-85qr-ggvx-pgjx.