GCVE - cpe:2.3:o:redlion:n-tron_702-w_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:redlion:n-tron_702-w_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Redlion (`fd43db5a-60ba-548c-afd4-ce6799919957`)
Product	N Tron 702 W Firmware (`db2da13b-8194-55e1-bafd-804e3ef2c8e8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-16210`	vulnerable	2026-06-08 05:19:27.553973	Details available The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W (all versions). Published: 2020-09-01T20:44:46.000Z Updated: 2024-08-04T13:37:54.199Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 http://seclists.org/fulldisclosure/2020/Sep/6 http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16208`	vulnerable	2026-06-08 05:19:27.547927	Details available The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron 702-W / 702M12-W (all versions). Published: 2020-09-01T20:42:18.000Z Updated: 2024-08-04T13:37:54.160Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 http://seclists.org/fulldisclosure/2020/Sep/6 http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16206`	vulnerable	2026-06-08 05:19:27.544830	Details available The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W (all versions). Published: 2020-09-01T20:40:15.000Z Updated: 2024-08-04T13:37:53.512Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 http://seclists.org/fulldisclosure/2020/Sep/6 http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16204`	vulnerable	2026-06-08 05:19:27.515536	Details available The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions). Published: 2020-09-01T20:46:26.000Z Updated: 2024-08-04T13:37:53.987Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 http://seclists.org/fulldisclosure/2020/Sep/6 http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-16544`	vulnerable	2026-06-08 05:09:00.582825	Details available In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks. Published: 2017-11-20T15:00:00.000Z Updated: 2025-06-09T15:35:03.132Z Open on db.gcve.eu Reference links https://www.twistlock.com/2017/11/20/cve-2017-16544-busybox-autocompletion-vulnerability/ https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8 https://usn.ubuntu.com/3935-1/ http://seclists.org/fulldisclosure/2019/Jun/18	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.