CVEvulnerability
CVE-2020-16204
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-09-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-912
Description
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions).
Affected configurations
• redlion n-tron 702-w firmware
• redlion n-tron 702m12-w firmware
Related
Weakness · CWE (1)
- CWE-912 Hidden Functionality weakness
References
- http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2020/Sep/6 Mailing List, Third Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 Third Party Advisory, US Government Resource
- http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2020/Sep/6 Mailing List, Third Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 Third Party Advisory, US Government Resource