Priority LOW 29
A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the co…
Vulnerabilities
7 records
Release: Red Lion Controls 700 Series Bootloader Versions 2.0.6.1, Firmware Versions 3.11.0 Clear all filters
Priority LOW 37
Navigating to a certain URL on the switch’s web server causes the switch to reboot.
Priority LOW 36
No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device.
Priority MEDIUM 42
SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authenti…
Priority MEDIUM 41
Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption.
TI-2026-70077 CVE-2026-39460
Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials
Priority MEDIUM 42
Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file.
Priority MEDIUM 40
Default factory credentials with administrative access are enabled and persist even after configuring other administrator accounts.