CVE-2026-12502

Deferred Deferred - Pending Action

Improper Privilege Management in Loytec LIP-ME201C and L-GATE

Publication date: 2026-07-24

Last updated on: 2026-07-27

Assigner: Switzerland Government Common Vulnerability Program

Description

Improper Privilege Management (CWE-269) in `/usr/bin/ltsudo` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a `superadmin`-group attacker to reset the password of any LARM user (including the `larmapp` service account) via the `set-passwd` subcommand.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-24

Last Modified

2026-07-27

Generated

2026-11-08

AI Q&A

2026-07-24

EPSS Evaluated

2026-11-07

NVD

CVE-2026-12502

EUVD

EUVD-2026-48590

Affected Vendors & Products

Vendor	Product	Version / Range
loytec	lip-me201c	to 8.4.16 (inc)
loytec	l-inx	to 8.4.16 (inc)
loytec	l-gate	to 8.4.16 (inc)
loytec	l-roc	to 8.4.16 (inc)
loytec	l-iob	to 8.4.16 (inc)
loytec	l-dali	to 8.4.16 (inc)
loytec	l-vis	to 8.4.16 (inc)
loytec	l-pad	to 8.4.16 (inc)
loytec	l-web	to 8.4.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper privilege management issue in LOYTEC devices. It allows users in the superadmin group to reset passwords for any LARM user, including the larmapp service account, by exploiting the ltsudo set-passwd subcommand. The flaw arises from missing authorization checks, enabling unauthorized password changes and potential privilege escalation.

Detection Guidance

Check for unauthorized password resets in LARM user accounts by reviewing logs for the ltsudo set-passwd subcommand usage. Inspect if any superadmin-group users have modified passwords for larmapp or other LARM users. Verify firmware versions on affected LOYTEC devices to confirm if they are below 8.4.18.

Impact Analysis

An attacker could exploit this to reset passwords and impersonate the larmapp service account, gaining unauthorized access to the system. This may lead to privilege escalation, data manipulation, or disruption of services controlled by the affected devices.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating confidentiality and integrity requirements in GDPR and HIPAA. Non-compliance may result in legal penalties, reputational damage, and loss of trust due to compromised systems handling sensitive data.

Mitigation Strategies

Upgrade all affected LOYTEC devices to firmware version 8.4.18 or later immediately. Restrict superadmin-group access to only necessary personnel. Monitor for any unauthorized account modifications or service account impersonations.

Hi! I’m here to help you understand CVE-2026-12502. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...