Read the docs
TI-2022-02851 Aliases CVE-2022-3090GHSA-vv26-mr89-rpfc

Path traversal in Red Lion Controls Crimson 3.0

Priority MEDIUM 40CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.

Summary

Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and prior are vulnerable to path traversal. When attempting to open a file using a specific path, the user's password hash is sent to an arbitrary host. This could allow an attacker to obtain user credential hashes.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0069 53rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red Lion ControlsCrimson 3.0All versions – 707.000—No fix listedCNA
Red Lion ControlsCrimson 3.1All versions – 3126.001—No fix listedCNA
Red Lion ControlsCrimson 3.2All versions – 3.2.0044.0—No fix listedCNA
  • Crimson 3.0 VendorRed Lion Controls Affected All versions – 707.000 Fixed in — No fix listed CNA
  • Crimson 3.1 VendorRed Lion Controls Affected All versions – 3126.001 Fixed in — No fix listed CNA
  • Crimson 3.2 VendorRed Lion Controls Affected All versions – 3.2.0044.0 Fixed in — No fix listed CNA

CPE configurations NVD · 121

CPEVersionsRoleVendor
cpe:2.3:a:redlion:crimson:*:*:*:*:*:*:*:*before 3.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:-:*:*:*:*:*:*3.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_477.003:*:*:*:*:*:*3.0 build_477.003VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_493.003:*:*:*:*:*:*3.0 build_493.003VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_493.004:*:*:*:*:*:*3.0 build_493.004VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_493.005:*:*:*:*:*:*3.0 build_493.005VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_502.000:*:*:*:*:*:*3.0 build_502.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_502.001:*:*:*:*:*:*3.0 build_502.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_502.003:*:*:*:*:*:*3.0 build_502.003VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_515.002:*:*:*:*:*:*3.0 build_515.002VulnerableRed Lion
  • cpe:2.3:a:redlion:crimson:*:*:*:*:*:*:*:* Versions before 3.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:-:*:*:*:*:*:* Versions 3.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_477.003:*:*:*:*:*:* Versions 3.0 build_477.003 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_493.003:*:*:*:*:*:* Versions 3.0 build_493.003 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_493.004:*:*:*:*:*:* Versions 3.0 build_493.004 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_493.005:*:*:*:*:*:* Versions 3.0 build_493.005 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_502.000:*:*:*:*:*:* Versions 3.0 build_502.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_502.001:*:*:*:*:*:* Versions 3.0 build_502.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_502.003:*:*:*:*:*:* Versions 3.0 build_502.003 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_515.002:*:*:*:*:*:* Versions 3.0 build_515.002 Vulnerable ·Red Lion
Show 111 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:redlion:crimson:3.0:build_515.003:*:*:*:*:*:*3.0 build_515.003VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_523.003:*:*:*:*:*:*3.0 build_523.003VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_530.000:*:*:*:*:*:*3.0 build_530.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_530.001:*:*:*:*:*:*3.0 build_530.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_530.002:*:*:*:*:*:*3.0 build_530.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_530.003:*:*:*:*:*:*3.0 build_530.003VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_548.001:*:*:*:*:*:*3.0 build_548.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_548.005:*:*:*:*:*:*3.0 build_548.005VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_573.001:*:*:*:*:*:*3.0 build_573.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_573.002:*:*:*:*:*:*3.0 build_573.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_579.001:*:*:*:*:*:*3.0 build_579.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_579.003:*:*:*:*:*:*3.0 build_579.003VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_582.000:*:*:*:*:*:*3.0 build_582.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_582.001:*:*:*:*:*:*3.0 build_582.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_582.003:*:*:*:*:*:*3.0 build_582.003VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_582.004:*:*:*:*:*:*3.0 build_582.004VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_599.000:*:*:*:*:*:*3.0 build_599.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_599.001:*:*:*:*:*:*3.0 build_599.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_603.000:*:*:*:*:*:*3.0 build_603.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_605.002:*:*:*:*:*:*3.0 build_605.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_615.004:*:*:*:*:*:*3.0 build_615.004VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_619.002:*:*:*:*:*:*3.0 build_619.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_619.004:*:*:*:*:*:*3.0 build_619.004VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_624.000:*:*:*:*:*:*3.0 build_624.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_624.005:*:*:*:*:*:*3.0 build_624.005VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_635.000:*:*:*:*:*:*3.0 build_635.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_635.001:*:*:*:*:*:*3.0 build_635.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_639.000:*:*:*:*:*:*3.0 build_639.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_640.000:*:*:*:*:*:*3.0 build_640.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_640.001:*:*:*:*:*:*3.0 build_640.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_640.002:*:*:*:*:*:*3.0 build_640.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_647.002:*:*:*:*:*:*3.0 build_647.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_657.001:*:*:*:*:*:*3.0 build_657.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_657.003:*:*:*:*:*:*3.0 build_657.003VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_662.002:*:*:*:*:*:*3.0 build_662.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_662.006:*:*:*:*:*:*3.0 build_662.006VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_675.000:*:*:*:*:*:*3.0 build_675.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_678.002:*:*:*:*:*:*3.0 build_678.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_683.000:*:*:*:*:*:*3.0 build_683.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_683.001:*:*:*:*:*:*3.0 build_683.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_683.002:*:*:*:*:*:*3.0 build_683.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_690.001:*:*:*:*:*:*3.0 build_690.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_690.002:*:*:*:*:*:*3.0 build_690.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_693.000:*:*:*:*:*:*3.0 build_693.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_694.000:*:*:*:*:*:*3.0 build_694.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_697.001:*:*:*:*:*:*3.0 build_697.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_697.002:*:*:*:*:*:*3.0 build_697.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_697.003:*:*:*:*:*:*3.0 build_697.003VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_700.000:*:*:*:*:*:*3.0 build_700.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_702.002:*:*:*:*:*:*3.0 build_702.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_702.004:*:*:*:*:*:*3.0 build_702.004VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_703.001:*:*:*:*:*:*3.0 build_703.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_705.000:*:*:*:*:*:*3.0 build_705.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.0:build_707.000:*:*:*:*:*:*3.0 build_707.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:-:*:*:*:*:*:*3.1VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3100.000:*:*:*:*:*:*3.1 build_3100.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3100.002:*:*:*:*:*:*3.1 build_3100.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3100.003:*:*:*:*:*:*3.1 build_3100.003VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3100.008:*:*:*:*:*:*3.1 build_3100.008VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3100.009:*:*:*:*:*:*3.1 build_3100.009VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3100.010:*:*:*:*:*:*3.1 build_3100.010VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3101.001:*:*:*:*:*:*3.1 build_3101.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3104.000:*:*:*:*:*:*3.1 build_3104.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3106.000:*:*:*:*:*:*3.1 build_3106.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3106.004:*:*:*:*:*:*3.1 build_3106.004VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3108.002:*:*:*:*:*:*3.1 build_3108.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3108.004:*:*:*:*:*:*3.1 build_3108.004VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3109.003:*:*:*:*:*:*3.1 build_3109.003VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3109.004:*:*:*:*:*:*3.1 build_3109.004VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3110.000:*:*:*:*:*:*3.1 build_3110.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3110.002:*:*:*:*:*:*3.1 build_3110.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3110.004:*:*:*:*:*:*3.1 build_3110.004VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3111.000:*:*:*:*:*:*3.1 build_3111.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3112.000:*:*:*:*:*:*3.1 build_3112.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3113.000:*:*:*:*:*:*3.1 build_3113.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3114.002:*:*:*:*:*:*3.1 build_3114.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3115.006:*:*:*:*:*:*3.1 build_3115.006VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3115.008:*:*:*:*:*:*3.1 build_3115.008VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3115.009:*:*:*:*:*:*3.1 build_3115.009VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3116.000:*:*:*:*:*:*3.1 build_3116.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3119.001:*:*:*:*:*:*3.1 build_3119.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3119.002:*:*:*:*:*:*3.1 build_3119.002VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3120.000:*:*:*:*:*:*3.1 build_3120.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3120.001:*:*:*:*:*:*3.1 build_3120.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3121.000:*:*:*:*:*:*3.1 build_3121.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3122.000:*:*:*:*:*:*3.1 build_3122.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3122.001:*:*:*:*:*:*3.1 build_3122.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3123.000:*:*:*:*:*:*3.1 build_3123.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3123.001:*:*:*:*:*:*3.1 build_3123.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3124.000:*:*:*:*:*:*3.1 build_3124.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3125.003:*:*:*:*:*:*3.1 build_3125.003VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3125.006:*:*:*:*:*:*3.1 build_3125.006VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3125.007:*:*:*:*:*:*3.1 build_3125.007VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3126.000:*:*:*:*:*:*3.1 build_3126.000VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.1:build_3126.001:*:*:*:*:*:*3.1 build_3126.001VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:-:*:*:*:*:*:*3.2VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0008.0:*:*:*:*:*:*3.2 build_3.2.0008.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0014.0:*:*:*:*:*:*3.2 build_3.2.0014.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0015.0:*:*:*:*:*:*3.2 build_3.2.0015.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0016.0:*:*:*:*:*:*3.2 build_3.2.0016.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0020.0:*:*:*:*:*:*3.2 build_3.2.0020.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0021.0:*:*:*:*:*:*3.2 build_3.2.0021.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0025.0:*:*:*:*:*:*3.2 build_3.2.0025.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0026.0:*:*:*:*:*:*3.2 build_3.2.0026.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0030.0:*:*:*:*:*:*3.2 build_3.2.0030.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0031.0:*:*:*:*:*:*3.2 build_3.2.0031.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0035.0:*:*:*:*:*:*3.2 build_3.2.0035.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0036.0:*:*:*:*:*:*3.2 build_3.2.0036.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0040.0:*:*:*:*:*:*3.2 build_3.2.0040.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0041.0:*:*:*:*:*:*3.2 build_3.2.0041.0VulnerableRed Lion
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0044.0:*:*:*:*:*:*3.2 build_3.2.0044.0VulnerableRed Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_515.003:*:*:*:*:*:* Versions 3.0 build_515.003 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_523.003:*:*:*:*:*:* Versions 3.0 build_523.003 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_530.000:*:*:*:*:*:* Versions 3.0 build_530.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_530.001:*:*:*:*:*:* Versions 3.0 build_530.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_530.002:*:*:*:*:*:* Versions 3.0 build_530.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_530.003:*:*:*:*:*:* Versions 3.0 build_530.003 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_548.001:*:*:*:*:*:* Versions 3.0 build_548.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_548.005:*:*:*:*:*:* Versions 3.0 build_548.005 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_573.001:*:*:*:*:*:* Versions 3.0 build_573.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_573.002:*:*:*:*:*:* Versions 3.0 build_573.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_579.001:*:*:*:*:*:* Versions 3.0 build_579.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_579.003:*:*:*:*:*:* Versions 3.0 build_579.003 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_582.000:*:*:*:*:*:* Versions 3.0 build_582.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_582.001:*:*:*:*:*:* Versions 3.0 build_582.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_582.003:*:*:*:*:*:* Versions 3.0 build_582.003 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_582.004:*:*:*:*:*:* Versions 3.0 build_582.004 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_599.000:*:*:*:*:*:* Versions 3.0 build_599.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_599.001:*:*:*:*:*:* Versions 3.0 build_599.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_603.000:*:*:*:*:*:* Versions 3.0 build_603.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_605.002:*:*:*:*:*:* Versions 3.0 build_605.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_615.004:*:*:*:*:*:* Versions 3.0 build_615.004 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_619.002:*:*:*:*:*:* Versions 3.0 build_619.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_619.004:*:*:*:*:*:* Versions 3.0 build_619.004 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_624.000:*:*:*:*:*:* Versions 3.0 build_624.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_624.005:*:*:*:*:*:* Versions 3.0 build_624.005 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_635.000:*:*:*:*:*:* Versions 3.0 build_635.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_635.001:*:*:*:*:*:* Versions 3.0 build_635.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_639.000:*:*:*:*:*:* Versions 3.0 build_639.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_640.000:*:*:*:*:*:* Versions 3.0 build_640.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_640.001:*:*:*:*:*:* Versions 3.0 build_640.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_640.002:*:*:*:*:*:* Versions 3.0 build_640.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_647.002:*:*:*:*:*:* Versions 3.0 build_647.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_657.001:*:*:*:*:*:* Versions 3.0 build_657.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_657.003:*:*:*:*:*:* Versions 3.0 build_657.003 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_662.002:*:*:*:*:*:* Versions 3.0 build_662.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_662.006:*:*:*:*:*:* Versions 3.0 build_662.006 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_675.000:*:*:*:*:*:* Versions 3.0 build_675.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_678.002:*:*:*:*:*:* Versions 3.0 build_678.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_683.000:*:*:*:*:*:* Versions 3.0 build_683.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_683.001:*:*:*:*:*:* Versions 3.0 build_683.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_683.002:*:*:*:*:*:* Versions 3.0 build_683.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_690.001:*:*:*:*:*:* Versions 3.0 build_690.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_690.002:*:*:*:*:*:* Versions 3.0 build_690.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_693.000:*:*:*:*:*:* Versions 3.0 build_693.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_694.000:*:*:*:*:*:* Versions 3.0 build_694.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_697.001:*:*:*:*:*:* Versions 3.0 build_697.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_697.002:*:*:*:*:*:* Versions 3.0 build_697.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_697.003:*:*:*:*:*:* Versions 3.0 build_697.003 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_700.000:*:*:*:*:*:* Versions 3.0 build_700.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_702.002:*:*:*:*:*:* Versions 3.0 build_702.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_702.004:*:*:*:*:*:* Versions 3.0 build_702.004 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_703.001:*:*:*:*:*:* Versions 3.0 build_703.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_705.000:*:*:*:*:*:* Versions 3.0 build_705.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.0:build_707.000:*:*:*:*:*:* Versions 3.0 build_707.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:-:*:*:*:*:*:* Versions 3.1 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3100.000:*:*:*:*:*:* Versions 3.1 build_3100.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3100.002:*:*:*:*:*:* Versions 3.1 build_3100.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3100.003:*:*:*:*:*:* Versions 3.1 build_3100.003 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3100.008:*:*:*:*:*:* Versions 3.1 build_3100.008 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3100.009:*:*:*:*:*:* Versions 3.1 build_3100.009 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3100.010:*:*:*:*:*:* Versions 3.1 build_3100.010 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3101.001:*:*:*:*:*:* Versions 3.1 build_3101.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3104.000:*:*:*:*:*:* Versions 3.1 build_3104.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3106.000:*:*:*:*:*:* Versions 3.1 build_3106.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3106.004:*:*:*:*:*:* Versions 3.1 build_3106.004 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3108.002:*:*:*:*:*:* Versions 3.1 build_3108.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3108.004:*:*:*:*:*:* Versions 3.1 build_3108.004 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3109.003:*:*:*:*:*:* Versions 3.1 build_3109.003 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3109.004:*:*:*:*:*:* Versions 3.1 build_3109.004 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3110.000:*:*:*:*:*:* Versions 3.1 build_3110.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3110.002:*:*:*:*:*:* Versions 3.1 build_3110.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3110.004:*:*:*:*:*:* Versions 3.1 build_3110.004 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3111.000:*:*:*:*:*:* Versions 3.1 build_3111.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3112.000:*:*:*:*:*:* Versions 3.1 build_3112.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3113.000:*:*:*:*:*:* Versions 3.1 build_3113.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3114.002:*:*:*:*:*:* Versions 3.1 build_3114.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3115.006:*:*:*:*:*:* Versions 3.1 build_3115.006 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3115.008:*:*:*:*:*:* Versions 3.1 build_3115.008 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3115.009:*:*:*:*:*:* Versions 3.1 build_3115.009 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3116.000:*:*:*:*:*:* Versions 3.1 build_3116.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3119.001:*:*:*:*:*:* Versions 3.1 build_3119.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3119.002:*:*:*:*:*:* Versions 3.1 build_3119.002 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3120.000:*:*:*:*:*:* Versions 3.1 build_3120.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3120.001:*:*:*:*:*:* Versions 3.1 build_3120.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3121.000:*:*:*:*:*:* Versions 3.1 build_3121.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3122.000:*:*:*:*:*:* Versions 3.1 build_3122.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3122.001:*:*:*:*:*:* Versions 3.1 build_3122.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3123.000:*:*:*:*:*:* Versions 3.1 build_3123.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3123.001:*:*:*:*:*:* Versions 3.1 build_3123.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3124.000:*:*:*:*:*:* Versions 3.1 build_3124.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3125.003:*:*:*:*:*:* Versions 3.1 build_3125.003 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3125.006:*:*:*:*:*:* Versions 3.1 build_3125.006 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3125.007:*:*:*:*:*:* Versions 3.1 build_3125.007 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3126.000:*:*:*:*:*:* Versions 3.1 build_3126.000 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.1:build_3126.001:*:*:*:*:*:* Versions 3.1 build_3126.001 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:-:*:*:*:*:*:* Versions 3.2 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0008.0:*:*:*:*:*:* Versions 3.2 build_3.2.0008.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0014.0:*:*:*:*:*:* Versions 3.2 build_3.2.0014.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0015.0:*:*:*:*:*:* Versions 3.2 build_3.2.0015.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0016.0:*:*:*:*:*:* Versions 3.2 build_3.2.0016.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0020.0:*:*:*:*:*:* Versions 3.2 build_3.2.0020.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0021.0:*:*:*:*:*:* Versions 3.2 build_3.2.0021.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0025.0:*:*:*:*:*:* Versions 3.2 build_3.2.0025.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0026.0:*:*:*:*:*:* Versions 3.2 build_3.2.0026.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0030.0:*:*:*:*:*:* Versions 3.2 build_3.2.0030.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0031.0:*:*:*:*:*:* Versions 3.2 build_3.2.0031.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0035.0:*:*:*:*:*:* Versions 3.2 build_3.2.0035.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0036.0:*:*:*:*:*:* Versions 3.2 build_3.2.0036.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0040.0:*:*:*:*:*:* Versions 3.2 build_3.2.0040.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0041.0:*:*:*:*:*:* Versions 3.2 build_3.2.0041.0 Vulnerable ·Red Lion
  • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0044.0:*:*:*:*:*:* Versions 3.2 build_3.2.0044.0 Vulnerable ·Red Lion

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-3090
  2. 2026-10-03 Alias added: GHSA-vv26-mr89-rpfc
  3. 2026-10-16 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2023-22865 Red Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel CVSS 3.1CRITICAL 10.0
  • TI-2023-21028 Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function CVSS 3.1CRITICAL 10.0
  • TI-2016-07615 Hard-coded credentials in Red Lion Controls Sixnet-Managed Industrial Switches CVSS 3.0CRITICAL 10.0
  • TI-2026-70077 Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials CVSS 4.0CRITICAL 9.3
  • TI-2026-70075 Missing authentication in Red Lion N-Tron 700 Series over SNMP CVSS 4.0CRITICAL 9.3
  • TI-2026-70071 Recoverable password storage in Red Lion Controls N-Tron 700 Series CVSS 4.0CRITICAL 9.3
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences