CVE-2020-13528 LOW

CVE-2020-13528

Vendor N/A
Product Lantronix
Weakness CWE-319 · Cleartext transmission
Published December 17, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

3.1/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause information disclosure. An attacker can sniff the network to trigger this vulnerability.

Key dates

02Disclosure timeline

December 17, 2020 CVE published
August 4, 2024 Record updated