CVE-2020-13528: Lantronix Xport Edge Firmware

Medium severity, CVSS 5.3. EPSS: 3% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause information disclosure. An attacker can sniff the network to trigger this vulnerability.

Affected products

• Lantronix Xport Edge Firmware: version 3.0.0.0 only; version 3.1.0.0 only; version 3.4.0.0 only; version 4.2.0.0 only

Published 2020-12-18. Last modified 2026-06-17.