Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-13528
HistoryDec 18, 2020 - 12:15 a.m.

CVE-2020-13528

2020-12-1800:15:14
CWE-319
[email protected]
web.nvd.nist.gov
1
vulnerability
information disclosure
lantronix xport edge

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

4

Confidence

High

EPSS

0.004

Percentile

73.3%

JSON

An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause information disclosure. An attacker can sniff the network to trigger this vulnerability.

Affected configurations

Nvd
Node
lantronixxport_edge_firmwareMatch3.0.0.0r11
OR
lantronixxport_edge_firmwareMatch3.1.0.0r9
OR
lantronixxport_edge_firmwareMatch3.4.0.0r12
OR
lantronixxport_edge_firmwareMatch4.2.0.0r7
AND
lantronixxport_edgeMatch-
VendorProductVersionCPE
lantronixxport_edge_firmware3.0.0.0cpe:2.3:o:lantronix:xport_edge_firmware:3.0.0.0:r11:*:*:*:*:*:*
lantronixxport_edge_firmware3.1.0.0cpe:2.3:o:lantronix:xport_edge_firmware:3.1.0.0:r9:*:*:*:*:*:*
lantronixxport_edge_firmware3.4.0.0cpe:2.3:o:lantronix:xport_edge_firmware:3.4.0.0:r12:*:*:*:*:*:*
lantronixxport_edge_firmware4.2.0.0cpe:2.3:o:lantronix:xport_edge_firmware:4.2.0.0:r7:*:*:*:*:*:*
lantronixxport_edge-cpe:2.3:h:lantronix:xport_edge:-:*:*:*:*:*:*:*

Related

prion 1
cvelist 1
talos 1
cve 1
prion
prion
Information disclosure
2020-12-18 00:15:00
cvelist
cvelist
CVE-2020-13528
2020-12-17 23:38:54
talos
talos
Lantronix XPort EDGE Web Manager and telnet CLI cleartext transmission of sensitive information vulnerability
2020-12-16 00:00:00
cve
cve
CVE-2020-13528
2020-12-18 00:15:14

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

4

Confidence

High

EPSS

0.004

Percentile

73.3%

JSON
Related for NVD:CVE-2020-13528
prion1cvelist1talos1cve1