Red Lion Controls

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Red Lion Controls records in CISA KEV

No Red Lion Controls vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

St-ipm-6350 Firmware 2 records MEDIUM St-ipm-8460 Firmware 2 records MEDIUM Vt-ipm2m-113-d Firmware 2 records MEDIUM Vt-ipm2m-213-d Firmware 2 records MEDIUM Vt-mipm-135-d Firmware 2 records MEDIUM Vt-mipm-245-d Firmware 2 records MEDIUM

Records

2 records in Vt-ipm2m-213-d Firmware · all components

TI-2023-22865 CVE-2023-42770 · GHSA-vwrm-49fw-hjgj

Red Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel

MEDIUM 51

Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00879 Published 2023-11-21 No fix listed CWE-288

TI-2023-21028 CVE-2023-40151 · GHSA-hxg4-c72j-73rf

Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function

MEDIUM 51

When user authentication is not enabled the shell can execute commands with the highest privileges.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01149 Published 2023-11-21 No fix listed CWE-749

Open these records in search →

Critical	7
High	3
Medium	1
Low	0
No CVSS	0