medium5.3
CVE-2020-13528
An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.…
Impact
An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause information disclosure. An attacker can sniff the network to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lantronix | Xport Edge Firmware | Versions 3.0.0.0, 3.1.0.0, 3.4.0.0, 4.2.0.0 |