EUVD-2020-8170

Malware in sbrugna...

CVE-2020-16208

The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16210

The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16206

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16204

The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16208

The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16210

The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W all versions...

Cross site scripting

The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W all versions...

Cross site request forgery (csrf)

The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron 702-W / 702M12-W all versions...

Cross site scripting

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16204

CVE-2020-16204 affects Red Lion N-Tron 702-W and 702M12-W (all versions). The vulnerability stems from an undocumented interface on the device that could allow an attacker to execute commands as root. Public sources place the risk with high impact (NVD CVSSv3 base 9.8; NETWORK, NONE USER interact...

CVE-2020-16204

The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16210

CVE-2020-16210 affects Red Lion N-Tron 702-W / 702M12-W (all versions). The vulnerability is a reflected cross‑site scripting flaw in the Web UI that may allow an attacker to execute arbitrary code in the context of an authenticated user, potentially enabling remote control of the device. CVSS v3...

CVE-2020-16210

The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16208

CVE-2020-16208 affects Red Lion N-Tron 702-W / 702M12-W. The vulnerability is Cross-Site Request Forgery (CSRF) that could allow an attacker to modify device configurations by luring an authenticated user to click a crafted link. NVD lists CVSSv3 base score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:...

CVE-2020-16206

CVE-2020-16206 affects Red Lion N-Tron 702-W and 702M12-W (all versions). It is a stored cross-site scripting vulnerability (CWE-79) caused by improper neutralization of input during web page generation, allowing an attacker to remotely execute arbitrary code and access sensitive data. Several so...

CVE-2020-16206

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W all versions...

PT-2020-14809 · N Tron · N-Tron 702M12-W +1

Name of the Vulnerable Software and Affected Versions: N-Tron 702-W / 702M12-W all versions Description: The issue concerns reflected cross-site scripting, which could allow an attacker to execute arbitrary code and perform actions in the context of an attacked user. Recommendations: For all...

PT-2020-14804 · N Tron · N-Tron 702-W +1

Name of the Vulnerable Software and Affected Versions: N-Tron 702-W / 702M12-W all versions Description: The issue arises from an undocumented interface on the device, potentially allowing an attacker to execute commands as root. Recommendations: For N-Tron 702-W / 702M12-W, consider restricting...

PT-2020-14806 · N Tron · N-Tron 702-W +1

Name of the Vulnerable Software and Affected Versions: N-Tron 702-W / 702M12-W all versions Description: The issue concerns stored cross-site scripting, which could allow an attacker to remotely execute arbitrary code, potentially gaining access to sensitive data. Recommendations: For all version...