Description
An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution.
Scores
CVSS v3
8.1
EPSS
0.0828
EPSS Percentile
92.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-331
Status
published
Products (2)
loytec/lvis-3me_firmware
< 6.1.1
n/a/LOYTEC LVIS-3ME
LOYTEC LVIS-3ME
Published
Oct 05, 2017
Tracked Since
Feb 18, 2026