Skip to content
OpenAdvisories
High ICSA-21-005-04 3 CVEs

Red Lion Crimson 3.1

Published Jan 5, 2021 · Updated Jan 5, 2021

Vendor: Red Lion, AutomationDirect Product: Crimson 3.1

Summary

Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service condition, read and modify the database, and leak memory data.

Vulnerabilities 3

  • High 7.5
    CVE-2020-27279

    A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a speciall…

  • Medium 6.5
    CVE-2020-27285

    The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify…

  • Medium 5.3
    CVE-2020-27283

    An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak ar…

Revision history

  1. #1

    Publication Date

References