Login Request a demo
Critical severity · published Sep 1, 2020
CVE-2020-16204
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W…
9.8
CVSS
5.5%
EPSS
No
On KEV
Description
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N7
N-tron 702-w Firmware · Redlion
All versions, or not specified · source: NVD
N7
N-tron 702m12-w Firmware · Redlion
All versions, or not specified · source: NVD
Affected product
N7
N-tron 702-w Firmware
Redlion
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-16204
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-16204
Exploit
http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html
Mailing List
http://seclists.org/fulldisclosure/2020/Sep/6
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01
More from N-tron 702-w Firmware
9.0
CVE-2020-16210
The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an…
9.0
CVE-2020-16206
The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron…
8.8
CVE-2020-16208
The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to…
8.8
CVE-2017-16544
In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not…