CVE-2020-13527 MEDIUM

CVE-2020-13527

Vendor N/A
Product Lantronix
Weakness CWE-352 · CSRF
Published December 17, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction Required
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:N

What the vulnerability does

01Description

An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause increased privileges. An attacker can send an HTTP request to trigger this vulnerability.

Key dates

02Disclosure timeline

December 17, 2020 CVE published
August 4, 2024 Record updated