CVE-2020-13528

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-12-18 · updated 2026-06-17
Weakness: CWE-319

Description

An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause information disclosure. An attacker can sniff the network to trigger this vulnerability.

Affected products

Lantronix XPort: 3.0.0.0-r11, 3.1.0.0-r9, 3.4.0.0-r12, 4.2.0.0-r7

References

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1136
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1136

Get alerted when CVE-2020-13528 or the next vulnerability affects your stack