Hard-coded credentials in Red Lion Controls Sixnet-Managed Industrial Switches
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-321.
Summary
A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and Stride-Managed Ethernet Switches running firmware Version 5.0.190. Vulnerable versions of Stride-Managed Ethernet switches and Sixnet-Managed Industrial switches use hard-coded HTTP SSL/SSH keys for secure communication. Because these keys cannot be regenerated by users, all products use the same key. The attacker could disrupt communication or compromise the system. CVSS v3 base score: 10, CVSS vector string: (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). Red Lion Controls recommends updating to SLX firmware Version 5.3.174.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Lion Controls | Sixnet-Managed Industrial Switches | firmware Version 5.0.196 and prior | — | No fix listed | CNA |
| AutomationDirect | STRIDE-Managed Ethernet Switch models | firmware Version 5.0.190 and prior. | — | No fix listed | CNA |
- Sixnet-Managed Industrial Switches VendorRed Lion Controls Affected firmware Version 5.0.196 and prior Fixed in — No fix listed CNA
- STRIDE-Managed Ethernet Switch models VendorAutomationDirect Affected firmware Version 5.0.190 and prior. Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redlion:sixnet-managed_industrial_switches_firmware:*:*:*:*:*:*:*:* | up to 5.0.196 | Vulnerable | Red Lion |
| cpe:2.3:h:redlion:sixnet-managed_industrial_switches:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Red Lion |
| cpe:2.3:o:redlion:stride-managed_ethernet_switches_firmware:*:*:*:*:*:*:*:* | up to 5.0.190 | Vulnerable | Red Lion |
| cpe:2.3:h:redlion:stride-managed_ethernet_switches:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Red Lion |
- cpe:2.3:o:redlion:sixnet-managed_industrial_switches_firmware:*:*:*:*:*:*:*:* Versions up to 5.0.196 Vulnerable ·Red Lion
- cpe:2.3:h:redlion:sixnet-managed_industrial_switches:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Red Lion
- cpe:2.3:o:redlion:stride-managed_ethernet_switches_firmware:*:*:*:*:*:*:*:* Versions up to 5.0.190 Vulnerable ·Red Lion
- cpe:2.3:h:redlion:stride-managed_ethernet_switches:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Red Lion
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2016-9335
- 2026-10-03 Alias added: GHSA-v3f3-rpcm-8jhw
References
More Red Lion Controls vulnerabilities
- TI-2023-22865 Red Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel CVSS 3.1CRITICAL 10.0
- TI-2023-21028 Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function CVSS 3.1CRITICAL 10.0
- TI-2026-70077 Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials CVSS 4.0CRITICAL 9.3
- TI-2026-70075 Missing authentication in Red Lion N-Tron 700 Series over SNMP CVSS 4.0CRITICAL 9.3
- TI-2026-70071 Recoverable password storage in Red Lion Controls N-Tron 700 Series CVSS 4.0CRITICAL 9.3
- TI-2026-70073 Hard-coded admin credentials in Red Lion N-Tron 700 Series devices CVSS 4.0CRITICAL 9.2
Sources
- CVE-2016-9335 · CVE Program
- CVE-2016-9335 · NVD
- FIRST EPSS
- GHSA-v3f3-rpcm-8jhw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences