CVE-2026-12504

Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.17 Loytec L-INX versions prior to 8.4.17 Loytec L-GATE versions prior to 8.4.17 Loytec L-ROC versions prior to 8.4.17 Loytec L-IOB versions prior to 8.4.17 Loytec L-DALI versions prior to 8.4.17 Loytec L-VIS versions prior to 8.4.17 Loytec L-PAD versions prior to 8.4.17

Description Improper authentication in the PAM (Pluggable Authentication Modules) configuration allows a local attacker to authenticate as a uid=0 account without a password. This is possible due to an empty password field in the /etc/passwd file, which enables the attacker to obtain a root shell.

Recommendations Update Loytec LIP-ME201C to version 8.4.17 or later. Update Loytec L-INX to version 8.4.17 or later. Update Loytec L-GATE to version 8.4.17 or later. Update Loytec L-ROC to version 8.4.17 or later. Update Loytec L-IOB to version 8.4.17 or later. Update Loytec L-DALI to version 8.4.17 or later. Update Loytec L-VIS to version 8.4.17 or later. Update Loytec L-PAD to version 8.4.17 or later.