Lantronix G520 Series Cellular Gateway
Summary
The Lantronix G520 Series Cellular Gateway is affected by multiple vulnerabilities, including Cross-site Scripting and Improper Verification of Cryptographic Signature. Successful exploitation could allow an attacker to replace software and execute arbitrary code with root privileges on affected devices.
IFF Assessment
The identified vulnerabilities allow attackers to execute arbitrary code with root privileges, posing a significant threat to the security and integrity of critical infrastructure systems.
Severity
The CVSS score of 7.5 reflects the ability for an authenticated attacker to execute arbitrary code with root privileges by exploiting vulnerabilities related to unencrypted metadata retrieval and direct HTML injection, impacting Confidentiality, Integrity, and Availability.
Defender Context
Defenders should be aware of these vulnerabilities affecting critical infrastructure devices like the Lantronix G520 Series Cellular Gateway. Prompt patching or mitigation is essential to prevent unauthorized code execution and potential system compromise.