CVE-2020-16206: XSS

Published Sep 1, 2020

Updated

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W (all versions).

Affected Software

6 affected components

Redlion N-tron 702-w Firmware

Redlion N-tron 702-w

Redlion N-tron 702m12-w Firmware

Redlion N-tron 702m12-w

Red Lion N-Tron 702-W

Red Lion N-Tron 702M12-W

Event History

Sep 1, 2020

CVE Published

via MITRE·08:40 PM

Data Sourced

via MITRE·08:40 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-20-240-01

Frequently Asked Questions

What is CVE-2020-16206?

CVE-2020-16206 is a vulnerability that affects the N-Tron 702-W / 702M12-W (all versions) and allows an attacker to remotely execute arbitrary code through stored cross-site scripting.

What is the severity of CVE-2020-16206?

CVE-2020-16206 has a severity level of critical with a value of 9.

How does CVE-2020-16206 impact Redlion N-tron 702-w?

CVE-2020-16206 impacts Redlion N-tron 702-w by making it vulnerable to remote code execution through stored cross-site scripting.

How can an attacker exploit CVE-2020-16206?

An attacker can exploit CVE-2020-16206 by injecting malicious code into the affected product, which can lead to the execution of arbitrary code.

Is there a fix for CVE-2020-16206?

At the moment, there is no official fix available for CVE-2020-16206. It is recommended to stay updated with the latest security advisories and patches from the vendor.