PatchSiren cyber security CVE debrief

CVE-2023-46385 LOYTEC electronics GmbH CVE debrief

CVE-2023-46385 is a HIGH severity vulnerability (CVSS 7.5) affecting LOYTEC electronics GmbH LINX Configurator 7.4.10 and multiple LOYTEC device models. Published on September 3, 2024, this vulnerability involves insecure permissions where administrative credentials are transmitted as unencrypted URL parameters, enabling remote attackers to capture passwords and gain full control over device configuration. The vulnerability affects seven products including LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, and L-INX Configurator. LOYTEC has released version 8.2.8 to address this issue and recommends disabling HTTP on affected devices as an interim mitigation per their security hardening guidance.

Vendor: LOYTEC electronics GmbH
Product: LINX-151
CVSS: HIGH 7.5
CISA KEV: Not listed in stored evidence
Original CVE published: 2024-09-03
Original CVE updated: 2024-09-03
Advisory published: 2024-09-03
Advisory updated: 2024-09-03

Who should care

Organizations operating LOYTEC building automation and industrial control systems, particularly facilities management teams, OT security engineers, and critical infrastructure operators using affected LINX, LVIS, and LIOB product lines.

Technical summary

The LINX Configurator 7.4.10 transmits administrative credentials as plaintext URL parameters without encryption. This insecure permission implementation allows network-based attackers to intercept credentials through browser history, proxy logs, referrer headers, or direct URL observation. Successful credential theft grants attackers full administrative control over LOYTEC device configurations. The vulnerability is network-exploitable with low attack complexity and no required privileges or user interaction.

Defensive priority

HIGH

Recommended defensive actions

Update LOYTEC LINX Configurator and affected devices to version 8.2.8 or later
Disable HTTP on affected LOYTEC devices per vendor security hardening guidance
Implement network segmentation to restrict access to LOYTEC device management interfaces
Monitor for unauthorized configuration changes on affected devices
Review access logs for suspicious URL parameter patterns indicating credential exposure

Evidence notes

CVE published 2024-09-03. CISA ICS advisory ICSA-24-247-01 issued same date. Vendor remediation available in version 8.2.8.

Sources and references

Verified primary and authoritative sources

CVE-2023-46385 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2023-46385

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2023-46385 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2023-46385

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source item URL
Unverified legacy reference

URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-247-01.json

cisa_csaf
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/topics/industrial-control-systems

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf

Reference
Source reference
Unverified legacy reference

URL: https://www.cisa.gov/uscert/ncas/tips/ST04-014

Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.