Authentication flaw

2020-12-1800:15:00

PRIOn knowledge base

www.prio-n.com

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%

JSON

An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause increased privileges. An attacker can send an HTTP request to trigger this vulnerability.

CPENameOperatorVersion
sgx_firmwareeq8.7.0.0 r1
sgx_firmwareeq8.9.0.0 r4
xport_edge_firmwareeq3.0.0.0 r11
xport_edge_firmwareeq3.1.0.0 r9
xport_edge_firmwareeq3.4.0.0 r12
xport_edge_firmwareeq4.2.0.0 r7

Name	Operator	Version
sgx_firmware	eq	8.7.0.0 r1
sgx_firmware	eq	8.9.0.0 r4
xport_edge_firmware	eq	3.0.0.0 r11
xport_edge_firmware	eq	3.1.0.0 r9
xport_edge_firmware	eq	3.4.0.0 r12
xport_edge_firmware	eq	4.2.0.0 r7

References

talosintelligence.com/vulnerability_reports/TALOS-2020-1135