CVE-2023-36623

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-07-05 · updated 2026-06-17
Weakness: CWE-798

Description

The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calculate the root password and escalate privileges.

Affected products

Loxone Miniserver Go Gen 2 Firmware: before 14.2 — fixed in 14.2

How to fix

Upgrade to a fixed version: Loxone Miniserver Go Gen 2 Firmware 14.2. Check the vendor advisory for mitigations.

References

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-013.txt
https://www.syss.de/pentest-blog/root-zugang-zu-smarthome-server-loxone-miniserver-go-gen-2-syss-2023-004/-012/-013
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-013.txt
https://www.syss.de/pentest-blog/root-zugang-zu-smarthome-server-loxone-miniserver-go-gen-2-syss-2023-004/-012/-013

Get alerted when CVE-2023-36623 or the next vulnerability affects your stack