CVE-2023-36622
HIGH 7.2EPSS 1.4%
The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter.
- CVSS v3.1
- 7.2 HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- 1.37% chance of exploitation in the next 30 days, 70th percentile
- Published
- 2023-07-05
- Updated
- 2024-11-21