Vulnerability — CVE-2023-36623

CVE-2023-36623

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-36623
Description:: The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calculate the root password and escalate privileges.
Last updated date:: 07/12/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 07/12/2023
Reference url to background: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-013.txt