CVE-2020-16204
9.8
CRITICAL · CVSS 3.1 · EPSS 5.5% (pctl 93)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions).
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 5.49% — more likely to be exploited than 93% of all CVEs |
| Weakness | CWE-912 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2020-09-01 |
| Last modified | 2026-06-17 |
Affected (4)
| Vendor | Product |
|---|---|
| redlion | n-tron 702-w |
| redlion | n-tron 702-w firmware |
| redlion | n-tron 702m12-w |
| redlion | n-tron 702m12-w firmware |
References
- http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html
- http://seclists.org/fulldisclosure/2020/Sep/6
- https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01
- http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html
- http://seclists.org/fulldisclosure/2020/Sep/6
- https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01
→ the Explorer · watch your stack · NVD