CVE-2020-13528CWE-319

An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and…

Low · published December 17, 2020

CVSS v3.0
3.1
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause information disclosure. An attacker can sniff the network to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
3.1 · LOW
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02969 · 87.1th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2020-12-17T23:38Z
EPSS history
Timeline
  • 17 DEC 23:38Z
    An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and…
    cvelistv5