CVE-2023-36623

Name of the Vulnerable Software and Affected Versions Loxone Miniserver Go Gen.2 versions prior to 14.2

Description The issue allows a local user to calculate the root password and escalate privileges due to the root password being calculated using hard-coded secrets and the MAC address.

Recommendations For versions prior to 14.2, update to version 14.2 or later to resolve the issue. As a temporary workaround, consider restricting local access to the Miniserver to minimize the risk of exploitation.