CVE-2020-16204

Опубликовано: 01 сент. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions).

Ссылки

http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2020/Sep/6
Mailing List
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01
Third Party Advisory
US Government Resource
http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2020/Sep/6
Mailing List
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:redlion:n-tron_702-w_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:redlion:n-tron_702-w:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:redlion:n-tron_702m12-w_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:redlion:n-tron_702m12-w:-:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03238

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-912

Связанные уязвимости

GHSA-j6rh-h9wc-gh7j