Red Lion vulnerabilities
We track 3 vulnerabilities in Red Lion products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2023.
Latest Red Lion vulnerabilities
- 9.8 Critical severity
Crimson: Improper Neutralization of Null Byte or NUL Character
The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent (%) character, invalid values w
- 7.8 High severity
DA50N: Insufficient Verification of Data Authenticity
Authorized users may install a maliciously modified package file when updating the device via the web user interface. The user may inadvertently use a package file obtained from an unauthorized source or a file that was compromised between download and deploym
- 9.8 Critical severity
DA50N: Weak Password Requirements
The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default ena