CVE-2026-55728

Deferred Deferred - Pending Action

Stack-based Buffer Overflow in Loytec LINX Devices

Publication date: 2026-07-24

Last updated on: 2026-07-27

Assigner: Switzerland Government Common Vulnerability Program

Description

Stack-based Buffer Overflow (CWE-121) in `/usr/bin/ltsudo` `cmd_ipaddr_conflict` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a `superadmin`-group attacker to trigger a SUID-root process abort or potentially elevate privileges via an overly long interface-name argument.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-24

Last Modified

2026-07-27

Generated

2026-08-13

AI Q&A

2026-07-24

EPSS Evaluated

2026-08-12

NVD

CVE-2026-55728

EUVD

EUVD-2026-48593

Affected Vendors & Products

Vendor	Product	Version / Range
loytec	lip-me201c	to 8.4.16 (inc)
loytec	l-inx	to 8.4.16 (inc)
loytec	l-gate	to 8.4.16 (inc)
loytec	l-roc	to 8.4.16 (inc)
loytec	l-iob	to 8.4.16 (inc)
loytec	l-dali	to 8.4.16 (inc)
loytec	l-vis	to 8.4.16 (inc)
loytec	l-pad	to 8.4.16 (inc)
loytec	l-web	to 8.4.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This is a stack-based buffer overflow vulnerability in the ltsudo SUID-root binary's cmd_ipaddr_conflict function. It occurs when a user-supplied interface name is copied into a fixed 20-byte stack buffer without length validation using strcpy. This allows a superadmin-group attacker to potentially crash the process or elevate privileges.

Detection Guidance

Check for the presence of vulnerable LOYTEC devices by inspecting firmware versions. The affected systems include L-WEB, L-ROC, L-INX, L-IOB, and related hardware. Verify if the installed firmware is below version 8.4.18.

Impact Analysis

An attacker with superadmin access could trigger a SUID-root process abort, causing service disruption. In extreme cases, it may allow privilege escalation to root level. The impact is limited to local attacks since exploitation requires existing superadmin-group access.

Compliance Impact

This vulnerability does not directly impact GDPR or HIPAA compliance as it is a low-severity stack-based buffer overflow in a SUID-root binary affecting LOYTEC building automation systems. It may indirectly risk data integrity if system logs are flooded, but no evidence suggests direct compliance violations.

Mitigation Strategies

Upgrade the firmware of all affected LOYTEC devices to version 8.4.18 or later. This addresses the stack-based buffer overflow in the ltsudo binary.

Hi! I’m here to help you understand CVE-2026-55728. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70