CyberSecBulletin

Redlion vulnerabilities

We track 3 vulnerabilities in Redlion products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 3, 2024.

3vulnerabilities
1critical
2high
0exploited
8.3average CVSS score

Latest Redlion vulnerabilities

  • 7.2 High severity

    mbNET.mini: Improper Neutralization of Special Elements used in an OS Command

    CVE-2024-5672Red Lion EuropeEPSS 1.22%

    A high privileged remote attacker can execute arbitrary system commands via GET requests due to improper neutralization of special elements used in an OS command.

  • 7.8 High severity

    DA50N: Insufficient Verification of Data Authenticity

    CVE-2022-26516Red Lion

    Authorized users may install a maliciously modified package file when updating the device via the web user interface. The user may inadvertently use a package file obtained from an unauthorized source or a file that was compromised between download and deploym

  • 9.8 Critical severity

    DA50N: Weak Password Requirements

    CVE-2022-1039Red LionEPSS 1.22%

    The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default ena