Skip to content
OpenAdvisories

Vendor

Red Lion

4 known vulnerabilities.

Red Lion at a glance

Last 12 months
0
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

DA50N 3 Crimson 1 ST-IPm-8460 0 ST-IPm-6350 0 VT-mIPm-135-D 0 VT-mIPm-245-D 0 VT-IPm2m-213-D 0 VT-IPm2m-113-D 0

Latest advisories

  • Critical max 10.0
    ICSA-23-320-01 2 CVEs

    Red Lion Sixnet RTUs

    Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to execute commands with high privileges.

    Red Lion
  • High max 8.8
    ICSA-23-306-01 1 CVE

    Red Lion Crimson

    Successful exploitation of this vulnerability could allow an attacker to truncate passwords configured by the Crimson configuration tool which could create weaker than intended credentials.

    Red Lion
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 8.8
    CVE-2023-5719

    Red Lion Crimson Improper Neutralization of Null Byte or NUL Character

    The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent (%) character, invalid values …

    Red Lion Crimson
  • Critical 9.6
    CVE-2022-1039

    ICSA-22-104-03 Red Lion DA50N

    The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default en…

    Red Lion DA50N
  • High 8.4
    CVE-2022-26516

    ICSA-22-104-03 Red Lion DA50N

    Authorized users may install a maliciously modified package file when updating the device via the web user interface. The user may inadvertently use a package file obtained from an unauthorized source or a file that was compromised between download and deploy…

    Red Lion DA50N
  • Medium 4.6
    CVE-2022-27179

    ICSA-22-104-03 Red Lion DA50N

    A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised.

    Red Lion DA50N