HIGH🇵🇱 Wersja polska

CVE-2020-16208

CVSS 8.8v3.1pub. 2020-09-01upd. 2024-11-21

The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron 702-W / 702M12-W (all versions).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Redlion N Tron 702m12 W

    HW
    Redlion
    wszystkie wersje

  • Redlion N Tron 702m12 W Firmware

    OS
    Redlion
    wszystkie wersje

  • Redlion N Tron 702 W

    HW
    Redlion
    wszystkie wersje

  • Redlion N Tron 702 W Firmware

    OS
    Redlion
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-16204CRITICAL9.8ten sam produkt

The affected product is vulnerable due to an undocumented interface found on the device, which may allow an at...

CVE-2020-16206CRITICAL9.0ten sam produkt

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely exe...

CVE-2020-16210CRITICAL9.0ten sam produkt

The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely ...

CVE-2017-16544HIGH8.8ten sam produkt

In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the s...

CVE-2022-1039CRITICAL9.6ten sam vendor

The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obta...