Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Red Lion Component: Da50n Firmware Clear all filters
TI-2022-00936 CVE-2022-1039 · GHSA-43x5-w66j-7jfw

ICSA-22-104-03 Red Lion DA50N

Priority MEDIUM 45

The weak password on the web user interface can be exploited via HTTP or HTTPS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0122 Published 2022-04-20 No fix listed CWE-521
TI-2022-09856 CVE-2022-26516 · GHSA-9vq3-hrgr-83x9

ICSA-22-104-03 Red Lion DA50N

Priority LOW 38

Authorized users may install a maliciously modified package file when updating the device via the web user interface.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00332 Published 2022-04-20 No fix listed CWE-345
TI-2022-10303 CVE-2022-27179 · GHSA-h63p-39p8-cjc7

ICSA-22-104-03 Red Lion DA50N

Priority LOW 30

A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00557 Published 2022-04-20 No fix listed CWE-522