CVE-2020-16206

Опубликовано: 01 сент. 2020

Источник: nvd

CVSS3: 9

CVSS2: 3.5

EPSS Низкий

Описание

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W (all versions).

Ссылки

http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2020/Sep/6
Exploit
Mailing List
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01
Third Party Advisory
US Government Resource
http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2020/Sep/6
Exploit
Mailing List
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:redlion:n-tron_702-w_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:redlion:n-tron_702-w:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:redlion:n-tron_702m12-w_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:redlion:n-tron_702m12-w:-:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01521

Низкий

9 Critical

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-422c-j857-w7c6