CVE-2023-46384

CVE-2023-46384 describes an Insecure Permissions vulnerability in all versions of LOYTEC electronics GmbH LINX Configurator. This flaw allows for the cleartext storage of credentials, enabling remote attackers to disclose the administrator password and bypass authentication to log into affected Loytec devices. With a CVSS score of 7.5 (HIGH), this vulnerability has a network attack vector and low attack complexity, potentially leading to high confidentiality impact. While there is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered some community discussion and media coverage, indicating awareness.