Description
The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter.
Unscored
CVE-2023-36622
EUVD-2023-40566GHSA-52rm-ch56-6jhr
The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject…
Published Jul 5, 2023 · Updated Nov 21, 2024 · Assigned by mitre