CVE-2020-16204
Red Lion N-Tron 702-W / 702M12-W 2.0.26 XSS / CSRF / Shell
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions).
El producto afectado es vulnerable debido a una interfaz no documentada que se encuentra en el dispositivo, lo que puede permitir a un atacante ejecutar comandos como root en el dispositivo en los dispositivos N-Tron 702-W / 702M12-W (todas las versiones)
Red Lion N-Tron 702-W and 702M12-W versions 2.0.26 and below suffer from cross site request forgery, hidden shell interface, cross site scripting and busybox vulnerabilities.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-07-31 CVE Reserved
- 2020-09-01 CVE Published
- 2024-02-05 EPSS Updated
- 2024-08-04 CVE Updated
- 2024-08-04 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-912: Hidden Functionality
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://seclists.org/fulldisclosure/2020/Sep/6 | Mailing List |
|
| https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html | 2024-08-04 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Redlion Search vendor "Redlion" | N-tron 702-w Firmware Search vendor "Redlion" for product "N-tron 702-w Firmware" | * | - |
Affected
| in | Redlion Search vendor "Redlion" | N-tron 702-w Search vendor "Redlion" for product "N-tron 702-w" | - | - |
Safe
|
| Redlion Search vendor "Redlion" | N-tron 702m12-w Firmware Search vendor "Redlion" for product "N-tron 702m12-w Firmware" | * | - |
Affected
| in | Redlion Search vendor "Redlion" | N-tron 702m12-w Search vendor "Redlion" for product "N-tron 702m12-w" | - | - |
Safe
|