Skip to content
OpenAdvisories
Low · 3.1 CVE-2020-13528 EUVD-2020-5775GHSA-x5c7-xvvf-6r97

An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R…

Published Dec 17, 2020 · Updated Aug 4, 2024 · Assigned by talos

Description

An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause information disclosure. An attacker can sniff the network to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Lantronix Lantronix XPort EDGE 3.0.0.0R11 Lantronix XPort EDGE 3.1.0.0R9 Lantronix XPort EDGE 3.4.0.0R12Lantronix XPort EDGE 4.2.0.0R7 —

References