Search
Find a vulnerability
Search criteria
14 vulnerabilities found for 700 Series by Red Lion Controls
CVE-2026-39460 (GCVE-0-2026-39460)
Vulnerability from nvd – Published: 2026-10-09 14:30 – Updated: 2026-10-09 14:30
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials
Summary
Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrator rights, the configuration file can be viewed through the CLI or they can be exported from the device through a TFTP transfer from the web interface. A TFTP transfer can be initiated through SNMP which does not require authentication.
Severity
8.1 (High)
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrator rights, the configuration file can be viewed through the CLI or they can be exported from the device through a TFTP transfer from the web interface. A TFTP transfer can be initiated through SNMP which does not require authentication."
}
],
"value": "Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrator rights, the configuration file can be viewed through the CLI or they can be exported from the device through a TFTP transfer from the web interface. A TFTP transfer can be initiated through SNMP which does not require authentication."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-522",
"description": "CWE-522",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:30:47.942Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-39460",
"datePublished": "2026-10-09T14:30:47.942Z",
"dateReserved": "2026-04-08T19:28:49.400Z",
"dateUpdated": "2026-10-09T14:30:47.942Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-39453 (GCVE-0-2026-39453)
Vulnerability from nvd – Published: 2026-10-09 14:42 – Updated: 2026-10-11 17:05
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Reachable Assertion
Summary
Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-11 16:49 UTC
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-39453",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-11T16:49:22.992241Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T17:05:28.474Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Navigating to a certain URL on the switch\u2019s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots."
}
],
"value": "Navigating to a certain URL on the switch\u2019s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-617",
"description": "CWE-617",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:42:18.998Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Reachable Assertion",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-39453",
"datePublished": "2026-10-09T14:42:18.998Z",
"dateReserved": "2026-04-08T19:28:49.591Z",
"dateUpdated": "2026-10-11T17:05:28.474Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33367 (GCVE-0-2026-33367)
Vulnerability from nvd – Published: 2026-10-09 14:38 – Updated: 2026-10-11 17:05
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function
Summary
SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-11 16:49 UTC
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-33367",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-11T16:49:45.274509Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T17:05:28.710Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades\u2014all without any authentication."
}
],
"value": "SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades\u2014all without any authentication."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:38:37.795Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-33367",
"datePublished": "2026-10-09T14:38:37.795Z",
"dateReserved": "2026-04-08T19:28:49.496Z",
"dateUpdated": "2026-10-11T17:05:28.710Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33272 (GCVE-0-2026-33272)
Vulnerability from nvd – Published: 2026-10-09 14:44 – Updated: 2026-10-11 17:05
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or Channel
Summary
A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.
Severity
4.9 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-11 16:49 UTC
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-33272",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-11T16:49:14.728539Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T17:05:28.353Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally."
}
],
"value": "A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "PHYSICAL",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-288",
"description": "CWE-288",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:44:26.429Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or Channel",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-33272",
"datePublished": "2026-10-09T14:44:26.429Z",
"dateReserved": "2026-04-08T19:28:49.636Z",
"dateUpdated": "2026-10-11T17:05:28.353Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-32645 (GCVE-0-2026-32645)
Vulnerability from nvd – Published: 2026-10-09 14:24 – Updated: 2026-10-09 14:33
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Use of Hard-Coded Credentials
Summary
Default factory credentials with administrative access are enabled and persist even after configuring other administrator accounts.
Severity
6 (Medium)
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Default factory credentials with administrative access are enabled and persist even after configuring other administrator accounts."
}
],
"value": "Default factory credentials with administrative access are enabled and persist even after configuring other administrator accounts."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "CWE-798",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:33:04.303Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Use of Hard-Coded Credentials",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-32645",
"datePublished": "2026-10-09T14:24:05.664Z",
"dateReserved": "2026-04-08T19:28:49.388Z",
"dateUpdated": "2026-10-09T14:33:04.303Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-29797 (GCVE-0-2026-29797)
Vulnerability from nvd – Published: 2026-10-09 14:40 – Updated: 2026-10-11 17:05
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Download of Code Without Integrity Check
Summary
No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating by using SNMP/TFTP.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-11 16:49 UTC
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-29797",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-11T16:49:35.238324Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T17:05:28.589Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating by using SNMP/TFTP."
}
],
"value": "No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating by using SNMP/TFTP."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-494",
"description": "CWE-494",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:40:20.991Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Download of Code Without Integrity Check",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-29797",
"datePublished": "2026-10-09T14:40:20.991Z",
"dateReserved": "2026-04-08T19:28:49.509Z",
"dateUpdated": "2026-10-11T17:05:28.589Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-28745 (GCVE-0-2026-28745)
Vulnerability from nvd – Published: 2026-10-09 14:36 – Updated: 2026-10-11 17:05
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format
Summary
Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-11 16:49 UTC
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-28745",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-11T16:49:55.930889Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T17:05:28.832Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system."
}
],
"value": "Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-257",
"description": "CWE-257",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:36:22.086Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-28745",
"datePublished": "2026-10-09T14:36:22.086Z",
"dateReserved": "2026-04-08T19:28:49.467Z",
"dateUpdated": "2026-10-11T17:05:28.832Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33272 (GCVE-0-2026-33272)
Vulnerability from cvelistv5 – Published: 2026-10-09 14:44 – Updated: 2026-10-11 17:05
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or Channel
Summary
A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.
Severity
4.9 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-11 16:49 UTC
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-33272",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-11T16:49:14.728539Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T17:05:28.353Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally."
}
],
"value": "A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "PHYSICAL",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-288",
"description": "CWE-288",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:44:26.429Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or Channel",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-33272",
"datePublished": "2026-10-09T14:44:26.429Z",
"dateReserved": "2026-04-08T19:28:49.636Z",
"dateUpdated": "2026-10-11T17:05:28.353Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-39453 (GCVE-0-2026-39453)
Vulnerability from cvelistv5 – Published: 2026-10-09 14:42 – Updated: 2026-10-11 17:05
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Reachable Assertion
Summary
Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-11 16:49 UTC
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-39453",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-11T16:49:22.992241Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T17:05:28.474Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Navigating to a certain URL on the switch\u2019s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots."
}
],
"value": "Navigating to a certain URL on the switch\u2019s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-617",
"description": "CWE-617",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:42:18.998Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Reachable Assertion",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-39453",
"datePublished": "2026-10-09T14:42:18.998Z",
"dateReserved": "2026-04-08T19:28:49.591Z",
"dateUpdated": "2026-10-11T17:05:28.474Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-29797 (GCVE-0-2026-29797)
Vulnerability from cvelistv5 – Published: 2026-10-09 14:40 – Updated: 2026-10-11 17:05
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Download of Code Without Integrity Check
Summary
No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating by using SNMP/TFTP.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-11 16:49 UTC
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-29797",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-11T16:49:35.238324Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T17:05:28.589Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating by using SNMP/TFTP."
}
],
"value": "No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating by using SNMP/TFTP."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-494",
"description": "CWE-494",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:40:20.991Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Download of Code Without Integrity Check",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-29797",
"datePublished": "2026-10-09T14:40:20.991Z",
"dateReserved": "2026-04-08T19:28:49.509Z",
"dateUpdated": "2026-10-11T17:05:28.589Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33367 (GCVE-0-2026-33367)
Vulnerability from cvelistv5 – Published: 2026-10-09 14:38 – Updated: 2026-10-11 17:05
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function
Summary
SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-11 16:49 UTC
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-33367",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-11T16:49:45.274509Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T17:05:28.710Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades\u2014all without any authentication."
}
],
"value": "SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades\u2014all without any authentication."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:38:37.795Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-33367",
"datePublished": "2026-10-09T14:38:37.795Z",
"dateReserved": "2026-04-08T19:28:49.496Z",
"dateUpdated": "2026-10-11T17:05:28.710Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-28745 (GCVE-0-2026-28745)
Vulnerability from cvelistv5 – Published: 2026-10-09 14:36 – Updated: 2026-10-11 17:05
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format
Summary
Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-11 16:49 UTC
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-28745",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-11T16:49:55.930889Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-11T17:05:28.832Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system."
}
],
"value": "Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-257",
"description": "CWE-257",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:36:22.086Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-28745",
"datePublished": "2026-10-09T14:36:22.086Z",
"dateReserved": "2026-04-08T19:28:49.467Z",
"dateUpdated": "2026-10-11T17:05:28.832Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-39460 (GCVE-0-2026-39460)
Vulnerability from cvelistv5 – Published: 2026-10-09 14:30 – Updated: 2026-10-09 14:30
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials
Summary
Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrator rights, the configuration file can be viewed through the CLI or they can be exported from the device through a TFTP transfer from the web interface. A TFTP transfer can be initiated through SNMP which does not require authentication.
Severity
8.1 (High)
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrator rights, the configuration file can be viewed through the CLI or they can be exported from the device through a TFTP transfer from the web interface. A TFTP transfer can be initiated through SNMP which does not require authentication."
}
],
"value": "Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrator rights, the configuration file can be viewed through the CLI or they can be exported from the device through a TFTP transfer from the web interface. A TFTP transfer can be initiated through SNMP which does not require authentication."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-522",
"description": "CWE-522",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:30:47.942Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-39460",
"datePublished": "2026-10-09T14:30:47.942Z",
"dateReserved": "2026-04-08T19:28:49.400Z",
"dateUpdated": "2026-10-09T14:30:47.942Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-32645 (GCVE-0-2026-32645)
Vulnerability from cvelistv5 – Published: 2026-10-09 14:24 – Updated: 2026-10-09 14:33
VLAI
EPSS
VEX
Title
Red Lion Controls N-Tron 700 Series Use of Hard-Coded Credentials
Summary
Default factory credentials with administrative access are enabled and persist even after configuring other administrator accounts.
Severity
6 (Medium)
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Red Lion Controls | 700 Series |
Affected:
0 , < Firmware Versions 3.11.0
(custom)
Affected: 0 , < Bootloader Versions 2.0.6.1 (custom) Unaffected: 3.11.1 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "700 Series",
"vendor": "Red Lion Controls",
"versions": [
{
"lessThan": "Firmware Versions 3.11.0",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "Bootloader Versions 2.0.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.11.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Default factory credentials with administrative access are enabled and persist even after configuring other administrator accounts."
}
],
"value": "Default factory credentials with administrative access are enabled and persist even after configuring other administrator accounts."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "CWE-798",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-09T14:33:04.303Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.hms-networks.com/"
},
{
"url": "https://www.hms-networks.com/cybersecurity"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRed Lion controls recommends the following upgrades for the N-Tron 700 Series: \u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eUpgrade to firmware version 3.11.1 or greater\u003c/li\u003e\u003cli\u003eConfigure or disable the SNMP communities\u003c/li\u003e\u003cli\u003eDisable access to the web GUI\u003c/li\u003e\u003c/ul\u003e\n\u003cp\u003eThe upgrade procedure document can be viewed \u003ca href=\"https://www.hms-networks.com/\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed \u003ca href=\"https://www.hms-networks.com/cybersecurity\"\u003ehere\u003c/a\u003e.\u003c/p\u003e"
}
],
"value": "Red Lion controls recommends the following upgrades for the N-Tron 700 Series: \n\n\n * Upgrade to firmware version 3.11.1 or greater\n * Configure or disable the SNMP communities\n * Disable access to the web GUI\n\n\n\n\n\nThe upgrade procedure document can be viewed here https://www.hms-networks.com/ .\n\n\n\n\nThe advisory issued by HMS Networks regarding these vulnerabilities can be viewed here https://www.hms-networks.com/cybersecurity ."
}
],
"source": {
"advisory": "ICSA-26-281-01",
"discovery": "EXTERNAL"
},
"title": "Red Lion Controls N-Tron 700 Series Use of Hard-Coded Credentials",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-32645",
"datePublished": "2026-10-09T14:24:05.664Z",
"dateReserved": "2026-04-08T19:28:49.388Z",
"dateUpdated": "2026-10-09T14:33:04.303Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}