CyberSecBulletin

Redlioncontrols vulnerabilities

We track 2 vulnerabilities in Redlioncontrols products across 6 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 21, 2023.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Redlioncontrols vulnerabilities

  • 9.8 Critical severity

    ST-IPm-8460: Missing Authentication for Critical Functionality

    CVE-2023-42770Red Lion Controls

    Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message is received over TCP/IP the RTU will simply accept the message with no authentic

  • 9.8 Critical severity

    ST-IPm-8460: Exposed Dangerous Method or Function

    CVE-2023-40151Red Lion ControlsEPSS 1.15%

    When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. Wh