CRITICAL🇵🇱 Wersja polska

CVE-2020-16206

CVSS 9.0v3.1pub. 2020-09-01upd. 2024-11-21

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W (all versions).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

  • Redlion N Tron 702m12 W

    HW
    Redlion
    all versions

  • Redlion N Tron 702m12 W Firmware

    OS
    Redlion
    all versions

  • Redlion N Tron 702 W

    HW
    Redlion
    all versions

  • Redlion N Tron 702 W Firmware

    OS
    Redlion
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEXSS
CWE
References

Related vulnerabilities

CVE-2020-16204CRITICAL9.8PL ✓same product

Ukryty interfejs w Red Lion N-Tron 702-W umożliwia wykonanie komend jako root

CVE-2020-16210CRITICAL9.0PL ✓same product

Reflected XSS umożliwiający RCE w Red Lion N-Tron 702-W / 702M12-W

CVE-2020-16208HIGH8.8same product

The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify differ...

CVE-2017-16544HIGH8.8same product

In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the s...

CVE-2022-1039CRITICAL9.6PL ✓same vendor

Słabe hasła w Red Lion DA50N umożliwiają przejęcie urządzenia