CVE-2020-16210

The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16204

The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W all versions...

Cross site scripting

The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W all versions...

Cross site request forgery (csrf)

The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron 702-W / 702M12-W all versions...

Cross site scripting

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16204

CVE-2020-16204 affects Red Lion N-Tron 702-W and 702M12-W (all versions). The vulnerability stems from an undocumented interface on the device that could allow an attacker to execute commands as root. Public sources place the risk with high impact (NVD CVSSv3 base 9.8; NETWORK, NONE USER interact...

CVE-2020-16204

The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16210

CVE-2020-16210 affects Red Lion N-Tron 702-W / 702M12-W (all versions). The vulnerability is a reflected cross‑site scripting flaw in the Web UI that may allow an attacker to execute arbitrary code in the context of an authenticated user, potentially enabling remote control of the device. CVSS v3...

CVE-2020-16210

The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16208

CVE-2020-16208 affects Red Lion N-Tron 702-W / 702M12-W. The vulnerability is Cross-Site Request Forgery (CSRF) that could allow an attacker to modify device configurations by luring an authenticated user to click a crafted link. NVD lists CVSSv3 base score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:...

CVE-2020-16206

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16206

CVE-2020-16206 affects Red Lion N-Tron 702-W and 702M12-W (all versions). It is a stored cross-site scripting vulnerability (CWE-79) caused by improper neutralization of input during web page generation, allowing an attacker to remotely execute arbitrary code and access sensitive data. Several so...

PT-2020-14804 · N Tron · N-Tron 702-W +1

Name of the Vulnerable Software and Affected Versions: N-Tron 702-W / 702M12-W all versions Description: The issue arises from an undocumented interface on the device, potentially allowing an attacker to execute commands as root. Recommendations: For N-Tron 702-W / 702M12-W, consider restricting...

PT-2020-14806 · N Tron · N-Tron 702-W +1

Name of the Vulnerable Software and Affected Versions: N-Tron 702-W / 702M12-W all versions Description: The issue concerns stored cross-site scripting, which could allow an attacker to remotely execute arbitrary code, potentially gaining access to sensitive data. Recommendations: For all version...

PT-2020-14809 · N Tron · N-Tron 702M12-W +1

Name of the Vulnerable Software and Affected Versions: N-Tron 702-W / 702M12-W all versions Description: The issue concerns reflected cross-site scripting, which could allow an attacker to execute arbitrary code and perform actions in the context of an attacked user. Recommendations: For all...

Red Lion N-Tron 702-W/702M12-W Cross-Site Scripting Vulnerability (CNVD-2020-49664)

The Red Lion N-Tron 702-W/702M12-W is a high voltage Ethernet switch product. A cross-site scripting vulnerability exists in the Red Lion N-Tron 702-W/702M12-W, which can be exploited by an attacker to execute arbitrary code to access sensitive data...

Red Lion N-Tron 702-W/702M12-W Cross-Site Scripting Vulnerability

The Red Lion N-Tron 702-W/702M12-W is a high voltage Ethernet switch product. A cross-site scripting vulnerability exists in the Red Lion N-Tron 702-W/702M12-W, which can be exploited by a remote attacker to execute arbitrary code and perform actions in the context of the attacked user...

Red Lion N-Tron 702-W/702M12-W Cross-Site Request Forgery Vulnerability

The Red Lion N-Tron 702-W/702M12-W is a high voltage Ethernet switch product. The Red Lion N-Tron 702-W/702M12-W suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to construct a malicious URI, bait a request, and perform a malicious operation in the...

Red Lion N-Tron 702-W/702M12-W Unspecified Interface Vulnerability

The Red Lion N-Tron 702-W/702M12-W is a high voltage Ethernet switch product. An undocumented interface vulnerability exists in the Red Lion N-Tron 702-W/702M12-W, which can be exploited by an attacker to submit a special request to execute arbitrary commands with ROOT privileges...

Tron Foundation: DOS attack by consuming all CPU and using all available memory

Summary: A single request to submit a post to /wallet/deploycontract with several megabytes of bytecode along with CPU intensive long parsing will consume CPU for about 10 minutes while still holding several megabytes of bytecode in heap. With enough requests lets say 1K-10K depending upon...