EUVD-2026-48597
GHSA-6jqh-rgp9-536f
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (NCSC.ch) · only source for this CVE.
CVSS VectorVendor: NCSC.ch
Lifecycle Timeline
2DescriptionCVE.org
Out-of-bounds Read (CWE-125) in BACnet packet parsing (bacdt_datetime_to_tod) in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64 allows an unauthenticated remote attacker to crash linx_a64.exe and ultimately reboot the device via a malformed BACnet TimeSynchronization or UTC-TimeSynchronization packet with an invalid month value. The same vulnerability affects multiple other Loytec products.
AnalysisAI
We need to extract from the provided information and synthesize into the required JSON fields. Let's go through each field.
Product name: The affected product is primarily the Loytec LIP-ME201C, but the vulnerability affects many products: LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS, L-PAD. The description says "through 8.4.18 on LINX-A64". So the primary product might be LIP-ME201C or the whole family. Which to pick? "Loytec LIP-ME201C" seems specific. But it might be better to use "Loytec LIP-ME201C" as the main product? Or the family "Loytec LINX-A64" as in the description. The description mentions "Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64". So it's a range of products that share the same underlying software. The product name could be "Loytec BACnet Devices". But the instruction says 1-3 words only. I can use "Loytec LIP-ME201C" as the first listed, or "Loytec LINX-A64". I'll go with "Loytec LIP-ME201C" as it's the first in the list and a specific product. Or "Loytec BACnet Devices" is 3 words. But they want the specific product name, not a vulnerability type. So I'll use "Loytec LIP-ME201C". Actually the description says "on LINX-A64", which is the platform. So maybe the product is "Loytec LINX-A64"? But the CPE list includes many products like l-inx, l-gate, etc. So it's a group of products. I could say "Loytec Automation Devices" but that's generic. I'll choose "Loytec LIP-ME201C" to be specific. 1-3 words: "Loytec LIP-ME201C" (3 words). That's fine.
Summary: Must be 2-3 sentences, original synthesis. Start with impact verb and product. E.g., "Denial of service in Loytec LIP-ME201C and related building automation devices allows..." The impact: crash linx_a64.exe and reboot device. So it's a DoS that forces device reboot. WHO: unauthenticated remote attacker via malformed BACnet TimeSynchronization or UTC-TimeSynchronization packet with invalid month value. So "Denial of service in Loytec LI
More in Lip Me20Xc
View allWe need to produce a JSON object based on given instructions. Fields: product_name, summary, technical_context, risk_ass
We need to produce a JSON with the specified fields. Data: CVE-2026-12496: Stored XSS in OPC XML-DA server statistics in
We are tasked with producing a comprehensive analysis of CVE-2026-12504 in JSON format. We have description, CVSS 4.0 ve
A local privilege escalation flaw in the ltsudo binary on Loytec LIP-ME201C and related L-Series building automation con
Persistent denial of service in Loytec LIP-ME201C and related building automation controllers through version 8.4.16 all
Privilege escalation in Loytec ltsudo utility on LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS, and L-PAD throu
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today