CVE-2026-12502
Received Received - Intake

Improper Privilege Management in Loytec LIP-ME201C and L-GATE

Publication date: 2026-07-24

Last updated on: 2026-07-24

Assigner: Switzerland Government Common Vulnerability Program

Description
Improper Privilege Management (CWE-269) in `/usr/bin/ltsudo` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a `superadmin`-group attacker to reset the password of any LARM user (including the `larmapp` service account) via the `set-passwd` subcommand.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-24
Last Modified
2026-07-24
Generated
2026-07-24
AI Q&A
2026-07-24
EPSS Evaluated
N/A
NVD
CVE-2026-12502
EUVD
EUVD-2026-48590

Affected Vendors & Products

Showing 9 associated CPEs
Vendor Product Version / Range
loytec lip-me201c to 8.4.16 (inc)
loytec l-inx to 8.4.16 (inc)
loytec l-gate to 8.4.16 (inc)
loytec l-roc to 8.4.16 (inc)
loytec l-iob to 8.4.16 (inc)
loytec l-dali to 8.4.16 (inc)
loytec l-vis to 8.4.16 (inc)
loytec l-pad to 8.4.16 (inc)
loytec l-web to 8.4.16 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper privilege management issue in LOYTEC devices. It allows users in the superadmin group to reset passwords for any LARM user, including the larmapp service account, by exploiting the ltsudo set-passwd subcommand. The flaw arises from missing authorization checks, enabling unauthorized password changes and potential privilege escalation.

Detection Guidance

Check for unauthorized password resets in LARM user accounts by reviewing logs for the ltsudo set-passwd subcommand usage. Inspect if any superadmin-group users have modified passwords for larmapp or other LARM users. Verify firmware versions on affected LOYTEC devices to confirm if they are below 8.4.18.

Impact Analysis

An attacker could exploit this to reset passwords and impersonate the larmapp service account, gaining unauthorized access to the system. This may lead to privilege escalation, data manipulation, or disruption of services controlled by the affected devices.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating confidentiality and integrity requirements in GDPR and HIPAA. Non-compliance may result in legal penalties, reputational damage, and loss of trust due to compromised systems handling sensitive data.

Mitigation Strategies

Upgrade all affected LOYTEC devices to firmware version 8.4.18 or later immediately. Restrict superadmin-group access to only necessary personnel. Monitor for any unauthorized account modifications or service account impersonations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12502. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart