PT-2020-14806 · N Tron · N-Tron 702-W+1

Published 2020-09-01 · Updated 2022-10-14 · CVE-2020-16206

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions N-Tron 702-W / 702M12-W (all versions)

Description The issue concerns stored cross-site scripting, which could allow an attacker to remotely execute arbitrary code, potentially gaining access to sensitive data.

Recommendations For all versions, consider implementing input validation and sanitization to prevent malicious code injection as a temporary workaround until a patch is available. Restrict access to sensitive data and monitor for any signs of unauthorized access.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-16206

Affected Products

N-Tron 702-W

N-Tron 702M12-W

References · 4

• 🔥 http://seclists.org/fulldisclosure/2020/Sep/6 · Exploit
• 🔥 http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-16206 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 · Note