CVE-2023-36624

HIGH

Loxone Miniserver Go Gen.2-14.0.3.28 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration. This allows the elevated execution of binaries without a password requirement.

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0033
EPSS Percentile 24.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-862
Status published
Products (1)
loxone/miniserver_go_gen_2_firmware < 14.0.3.28
Published Jul 05, 2023
Tracked Since Feb 18, 2026