VYPR
← All advisories
Medium severity4.5NVD Advisory· Published Dec 18, 2020· Updated Jun 17, 2026

CVE-2020-13527

CVE-2020-13527

Description

An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause increased privileges. An attacker can send an HTTP request to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Lantronix/Sgx Firmware2 versions
    cpe:2.3:o:lantronix:sgx_firmware:8.7.0.0:r1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:lantronix:sgx_firmware:8.7.0.0:r1:*:*:*:*:*:*
    • cpe:2.3:o:lantronix:sgx_firmware:8.9.0.0:r4:*:*:*:*:*:*
  • Lantronix/Xport Edge Firmware4 versions
    cpe:2.3:o:lantronix:xport_edge_firmware:3.0.0.0:r11:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:lantronix:xport_edge_firmware:3.0.0.0:r11:*:*:*:*:*:*
    • cpe:2.3:o:lantronix:xport_edge_firmware:3.1.0.0:r9:*:*:*:*:*:*
    • cpe:2.3:o:lantronix:xport_edge_firmware:3.4.0.0:r12:*:*:*:*:*:*
    • cpe:2.3:o:lantronix:xport_edge_firmware:4.2.0.0:r7:*:*:*:*:*:*
  • Lantronix/XPort EDGEdescription
  • Lantronix/XPort EDGEllm-fuzzy
    Range: 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12, 4.2.0.0R7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.