CVE-2020-16206: XSS

Reference Links

• http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html
• http://seclists.org/fulldisclosure/2020/Sep/6
• https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01
• https://www.cisa.gov/news-events/ics-advisories/icsa-20-240-01 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• ICSA-20-240-01

Frequently Asked Questions

• What is CVE-2020-16206?

  CVE-2020-16206 is a vulnerability that affects the N-Tron 702-W / 702M12-W (all versions) and allows an attacker to remotely execute arbitrary code through stored cross-site scripting.

• What is the severity of CVE-2020-16206?

  CVE-2020-16206 has a severity level of critical with a value of 9.

• How does CVE-2020-16206 impact Redlion N-tron 702-w?

  CVE-2020-16206 impacts Redlion N-tron 702-w by making it vulnerable to remote code execution through stored cross-site scripting.

• How can an attacker exploit CVE-2020-16206?

  An attacker can exploit CVE-2020-16206 by injecting malicious code into the affected product, which can lead to the execution of arbitrary code.

• Is there a fix for CVE-2020-16206?

  At the moment, there is no official fix available for CVE-2020-16206. It is recommended to stay updated with the latest security advisories and patches from the vendor.