CVE-2020-13527

Severity: medium (CVSS 4.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-12-18 · updated 2026-06-17
Weakness: CWE-352

Description

An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause increased privileges. An attacker can send an HTTP request to trigger this vulnerability.

Affected products

LANTRONIX Sgx Firmware: 8.7.0.0-r1, 8.9.0.0-r4
Lantronix XPort: 3.0.0.0-r11, 3.1.0.0-r9, 3.4.0.0-r12, 4.2.0.0-r7

References

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1135
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1135

Get alerted when CVE-2020-13527 or the next vulnerability affects your stack