EUVD-2026-48593
GHSA-r7g9-r28w-w2pq
Severity by source
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (NCSC.ch) · only source for this CVE.
CVSS VectorVendor: NCSC.ch
Lifecycle Timeline
1DescriptionCVE.org
Stack-based Buffer Overflow (CWE-121) in /usr/bin/ltsudo cmd_ipaddr_conflict in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a superadmin-group attacker to trigger a SUID-root process abort or potentially elevate privileges via an overly long interface-name argument.
AnalysisAI
Privilege escalation in Loytec ltsudo utility on LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS, and L-PAD through 8.4.16 allows a superadmin-group attacker to execute arbitrary code as root via a long interface-name argument to the cmd_ipaddr_conflict function. The vulnerability is a stack-based buffer overflow (CWE-121) in the SUID-root binary. No active exploitation or public exploit code identified at time of analysis.
More in Lip Me20Xc
View allWe need to produce a JSON object based on given instructions. Fields: product_name, summary, technical_context, risk_ass
We need to produce a JSON with the specified fields. Data: CVE-2026-12496: Stored XSS in OPC XML-DA server statistics in
We need to extract from the provided information and synthesize into the required JSON fields. Let's go through each fie
We are tasked with producing a comprehensive analysis of CVE-2026-12504 in JSON format. We have description, CVSS 4.0 ve
A local privilege escalation flaw in the ltsudo binary on Loytec LIP-ME201C and related L-Series building automation con
Persistent denial of service in Loytec LIP-ME201C and related building automation controllers through version 8.4.16 all
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today