Skip to content
OpenAdvisories

Vendor

Red Lion Controls

11 known vulnerabilities.

Products

700 Series 7 ST-IPm-8460 2 ST-IPm-6350 2 VT-mIPm-135-D 2 VT-mIPm-245-D 2 VT-IPm2m-213-D 2 VT-IPm2m-113-D 2 Sixnet-Managed Industrial Switches 1 Crimson 3.0 1 Crimson 3.1 1 Crimson 3.2 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-42770

    Red Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel

    Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message is received over TCP/IP the RTU will simply accept the message with no authenti…

    Red Lion Controls ST-IPm-6350 VT-mIPm-245-D VT-IPm2m-113-D
  • Critical 10.0
    CVE-2023-40151

    Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function

    When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. W…

    Red Lion Controls ST-IPm-6350 VT-mIPm-245-D VT-IPm2m-113-D