CVE-2017-13992

—

CVSS 3.0

8.1 high

EPSS

4%p88

Published

Oct 5, 2017 (Oct 5, 2017)

Modified

Jun 17, 2026

Description

An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution.

Vendors: loytec
Products: lvis-3me firmware
Weakness: CWE-331
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.5%)

In the news0 stories

No ingested article mentions this CVE yet.