Login Request a demo
Critical severity · published Nov 21, 2023
CVE-2023-40151
Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function
9.8
CVSS
1.1%
EPSS
No
On KEV
Description
When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message comes over TCP/IP the RTU will simply accept the message with no authentication challenge.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ST
ST-IPm-6350 · Red Lion Controls
4.9.114 · source: vendor
ST
ST-IPm-8460 · Red Lion Controls
6.0.202 · source: vendor
VT
VT-IPm2m-113-D · Red Lion Controls
4.9.114 · source: vendor
VT
VT-IPm2m-213-D · Red Lion Controls
4.9.114 · source: vendor
VT
VT-mIPm-135-D · Red Lion Controls
4.9.114 · source: vendor
VT
VT-mIPm-245-D · Red Lion Controls
4.9.114 · source: vendor
SF
St-ipm-6350 Firmware · Redlioncontrols
4.9.114 · source: NVD
SF
St-ipm-8460 Firmware · Redlioncontrols
6.0.202 · source: NVD
VF
Vt-ipm2m-113-d Firmware · Redlioncontrols
4.9.114 · source: NVD
VF
Vt-ipm2m-213-d Firmware · Redlioncontrols
4.9.114 · source: NVD
VF
Vt-mipm-135-d Firmware · Redlioncontrols
4.9.114 · source: NVD
VF
Vt-mipm-245-d Firmware · Redlioncontrols
4.9.114 · source: NVD
Affected product
ST
ST-IPm-6350
Red Lion Controls
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-40151
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-40151
Mitigation
https://support.redlion.net/hc/en-us/articles/19339209248269-RLCSIM-2023-05-Authentication-Bypass-and-Remote-Code-Execution
Third Party Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-23-320-01
More from ST-IPm-6350
9.8
CVE-2023-42770
Red Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel