Vulnerability · Published Sep 1, 2020 · Assigned by icscert
CVE-2020-16204
Critical 9.8
In plain English
A critical-severity security flaw in N-Tron 702-W / 702M12-W. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.5% (higher than 93% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)5.5%top 7.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | N-Tron 702-W / 702M12-W | Versions prior to all versions |
Weakness: CWE-912
References
- https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 x_refsource_MISC
- 20200902 SEC Consult SA-20200902-0 :: Multiple Vulnerabilities in Red Lion N-Tron 702-W, Red Lion N-Tron 702M12-W mailing-list, x_refsource_FULLDISC
- http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html x_refsource_MISC