ST-IPm-8460 vulnerabilities

2 known vulnerabilities in ST-IPm-8460 from Red Lion Controls. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  ST-IPm-8460: Missing Authentication for Critical Functionality

  CVE-2023-42770Nov 21, 2023Red Lion Controls

  Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message is received over TCP/IP the RTU will simply accept the message with no authentic

• 9.8 Critical severity

  ST-IPm-8460: Exposed Dangerous Method or Function

  CVE-2023-40151Nov 21, 2023Red Lion ControlsEPSS 1.15%

  When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. Wh