Skip to content
OpenAdvisories
Critical ICSA-20-240-01 5 CVEs

Red Lion N-Tron 702-W, 702M12-W

Published Aug 27, 2020 · Updated Aug 27, 2020

Vendor: Red Lion, AutomationDirect Product: N-Tron 702-W Product: N-Tron 702M12-W

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to sensitive information, execute system commands, and perform actions in the context of an attacked user.

Vulnerabilities 5

  • High 8.8
    CVE-2017-16544

    In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, use…

    busybox busybox busybox Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-16204

    The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to…

  • Unscored —
    CVE-2020-16206

    The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbi…

  • Unscored —
    CVE-2020-16208

    The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different confi…

  • Unscored —
    CVE-2020-16210

    The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute a…

Revision history

  1. #1

    ICSA-20-240-01 Red Lion N-Tron 702-W, 702M12-W

References