Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-10990 EUVD-2019-2704GHSA-v23f-q7r3-x5cj

Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected …

Published Sep 23, 2019 · Updated Jun 2, 2026 · Assigned by icscert

Description

Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may allow an attacker to access configuration files.

Affected products

VendorProductAffectedFixed
— Red Lion Controls Crimson (Windows configuration software) Version 3.0 and prior, Version 3.1 prior to release 3112.00 —

Advisories 1

References