VDB
CVE-2020-16204
CVE-2020-16204
PUBLISHED
CVSS 9.800000190734863 CRITICAL
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions).
EPSS 5.49% · 92.7th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
5.49%
92.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| redlion | n-tron_702m12-w_firmware | |
| n/a | N-Tron 702-W / 702M12-W | Versions prior to all versions |
| redlion | n-tron_702-w_firmware |
Timeline
- Aug 27, 2020 CVE Published
- Sep 4, 2020 PoC Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 28, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 1, 2022 EPSS Score
- May 3, 2022 EPSS Score
- Jul 5, 2022 EPSS Score
- Nov 8, 2022 EPSS Score
- Jan 10, 2023 EPSS Score
References
- http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html exploit
- https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 advisory
- 20200902 SEC Consult SA-20200902-0 :: Multiple Vulnerabilities in Red Lion N-Tron 702-W, Red Lion N-Tron 702M12-W mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2020-16204 advisory