Unchecked Input Vulnerability in Loytec SNMP Agents
CVE-2026-55731

6.6MEDIUM

Key Information:

Vendor

Loytec

Status
Lip-me20xc
L-inx
L-gate
L-roc
Vendor
CVE Published:
24 July 2026

What is CVE-2026-55731?

An unchecked input vulnerability exists in the SNMP agent of various Loytec products, including LIP-ME201C and L-GATE. This flaw allows an unauthenticated remote attacker to exploit crafted SNMP GETNEXT requests with large Object Identifier (OID) components, potentially leading to persistent denial of service by causing CPU exhaustion. The vulnerability affects multiple products up to version 8.4.16 on the LINX-A64 platform, underscoring the importance of implementing security measures to prevent such attacks.

Affected Version(s)

L-DALI 0 <= 8.4.16

L-GATE 0 <= 8.4.16

L-INX 0 <= 8.4.16

References

https://www.loytec.com/support/product-security/advisorie...
vendor-advisory

CVSS V4

Score:
6.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Daniel Hulliger, armasuisse CYD Campus
Damian Pfammatter, armasuisse CYD Campus
.