Description
No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating by using SNMP/TFTP.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Lion Controls | 700 Series | < Firmware Versions 3.11.0, < Bootloader Versions 2.0.6.1 | Firmware Versions 3.11.0 |
Advisories 1
- ICSA-26-281-01 Red Lion Controls N-Tron 700 Series - Update A CISA ICS & IT advisories · Oct 15, 2026