High severity7.8NVD Advisory· Published Jul 5, 2023· Updated Jun 17, 2026

CVE-2023-36624

Description

Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration. This allows the elevated execution of binaries without a password requirement.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Loxone/Miniserver Go Gen.2description
Loxone/Miniserver Go Gen.2llm-fuzzy
Range: <=14.0.3.28

Patches

Vulnerability mechanics

References

www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-004.txtnvdExploitThird Party Advisory
www.syss.de/pentest-blog/root-zugang-zu-smarthome-server-loxone-miniserver-go-gen-2-syss-2023-004/-012/-013nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000