GCVE - cpe:2.3:h:redlion:n-tron_702m12-w:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:redlion:n-tron_702m12-w:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Redlion (`fd43db5a-60ba-548c-afd4-ce6799919957`)
Product	N Tron 702M12 W (`d1ed34c4-ef8b-56f8-ad5d-572d2aa4efca`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-16210`	not_vulnerable	2026-06-08 05:19:27.554035	Details available The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W / 702M12-W (all versions). Published: 2020-09-01T20:44:46.000Z Updated: 2024-08-04T13:37:54.199Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 http://seclists.org/fulldisclosure/2020/Sep/6 http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16208`	not_vulnerable	2026-06-08 05:19:27.547993	Details available The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron 702-W / 702M12-W (all versions). Published: 2020-09-01T20:42:18.000Z Updated: 2024-08-04T13:37:54.160Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 http://seclists.org/fulldisclosure/2020/Sep/6 http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16206`	not_vulnerable	2026-06-08 05:19:27.544894	Details available The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W (all versions). Published: 2020-09-01T20:40:15.000Z Updated: 2024-08-04T13:37:53.512Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 http://seclists.org/fulldisclosure/2020/Sep/6 http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16204`	not_vulnerable	2026-06-08 05:19:27.517675	Details available The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions). Published: 2020-09-01T20:46:26.000Z Updated: 2024-08-04T13:37:53.987Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01 http://seclists.org/fulldisclosure/2020/Sep/6 http://packetstormsecurity.com/files/159064/Red-Lion-N-Tron-702-W-702M12-W-2.0.26-XSS-CSRF-Shell.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-16544`	not_vulnerable	2026-06-08 05:09:00.584716	Details available In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks. Published: 2017-11-20T15:00:00.000Z Updated: 2025-06-09T15:35:03.132Z Open on db.gcve.eu Reference links https://www.twistlock.com/2017/11/20/cve-2017-16544-busybox-autocompletion-vulnerability/ https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8 https://usn.ubuntu.com/3935-1/ http://seclists.org/fulldisclosure/2019/Jun/18	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.