Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Lantronix Component: Xport Edge Firmware Clear all filters
TI-2023-06621 CVE-2023-7237 · GHSA-3gg4-v4m9-rj55

Lantronix XPort Weak Encoding for Password

Priority LOW 35

Lantronix XPort sends weakly encoded credentials within web request headers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00305 Published 2024-01-23 No fix listed CWE-261
TI-2020-10607 CVE-2020-13528 · GHSA-x5c7-xvvf-6r97

Cleartext transmission of sensitive information in Lantronix

Priority LOW 29

An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.02969 Published 2020-12-17 No fix listed CWE-319
TI-2020-10606 CVE-2020-13527 · GHSA-f34x-833g-jcxv

Cross-site request forgery in Lantronix

Priority LOW 22

An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7.

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.00596 Published 2020-12-17 No fix listed CWE-352