Read the docs

Red Lion

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Red Lion records in CISA KEV

No Red Lion vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Da50n Firmware · all components

TI-2022-00936 CVE-2022-1039 · GHSA-43x5-w66j-7jfw

ICSA-22-104-03 Red Lion DA50N

Priority MEDIUM 45

The weak password on the web user interface can be exploited via HTTP or HTTPS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0122 Published 2022-04-20 No fix listed CWE-521
TI-2022-09856 CVE-2022-26516 · GHSA-9vq3-hrgr-83x9

ICSA-22-104-03 Red Lion DA50N

Priority LOW 38

Authorized users may install a maliciously modified package file when updating the device via the web user interface.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00332 Published 2022-04-20 No fix listed CWE-345
TI-2022-10303 CVE-2022-27179 · GHSA-h63p-39p8-cjc7

ICSA-22-104-03 Red Lion DA50N

Priority LOW 30

A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00557 Published 2022-04-20 No fix listed CWE-522
Open these records in search →