Description
An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause increased privileges. An attacker can send an HTTP request to trigger this vulnerability.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1135
Scores
CVSS v3
4.5
EPSS
0.0059
EPSS Percentile
43.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
Details
CWE
CWE-352
Status
published
Products (6)
lantronix/sgx_firmware
8.7.0.0 r1
lantronix/sgx_firmware
8.9.0.0 r4
lantronix/xport_edge_firmware
3.0.0.0 r11
lantronix/xport_edge_firmware
3.1.0.0 r9
lantronix/xport_edge_firmware
3.4.0.0 r12
lantronix/xport_edge_firmware
4.2.0.0 r7
Published
Dec 18, 2020
Tracked Since
Feb 18, 2026