Lantronix Xport Edge Firmware vulnerabilities

3 CVEs affecting Lantronix Xport Edge Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-7237, published 2024-01-23.

More from Lantronix.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-13528, published 2020-12-18. Medium severity, CVSS 5.3. EPSS: 3% chance of exploitation in the next 30 days. An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP…
• CVE-2020-13527, published 2020-12-18. Medium severity, CVSS 4.5. EPSS: 0.6% chance of exploitation in the next 30 days. An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause…
• CVE-2023-7237, published 2024-01-23. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Lantronix XPort sends weakly encoded credentials within web request headers.