PT-2020-14809 · N Tron · N-Tron 702-W+1

Published 2020-09-01 · Updated 2022-10-14 · CVE-2020-16210

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions N-Tron 702-W / 702M12-W (all versions)

Description The issue concerns reflected cross-site scripting, which could allow an attacker to execute arbitrary code and perform actions in the context of an attacked user.

Recommendations For all versions, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-16210

Affected Products

N-Tron 702-W

N-Tron 702M12-W

References · 5

• 🔥 http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-16210 · Security Note
• https://t.me/cybersecuritytechnologies/1688 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 · Note
• http://seclists.org/fulldisclosure/2020/Sep/6 · Note