Critical severity · published Nov 21, 2023
CVE-2023-42770
Red Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel
9.8
CVSS
0.9%
EPSS
No
On KEV
Description
Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message is received over TCP/IP the RTU will simply accept the message with no authentication challenge.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ST
ST-IPm-6350 · Red Lion Controls
4.9.114 · source: vendor
ST
ST-IPm-8460 · Red Lion Controls
6.0.202 · source: vendor
VT
VT-IPm2m-113-D · Red Lion Controls
4.9.114 · source: vendor
VT
VT-IPm2m-213-D · Red Lion Controls
4.9.114 · source: vendor
VT
VT-mIPm-135-D · Red Lion Controls
4.9.114 · source: vendor
VT
VT-mIPm-245-D · Red Lion Controls
4.9.114 · source: vendor
SF
St-ipm-6350 Firmware · Redlioncontrols
4.9.114 · source: NVD
SF
St-ipm-8460 Firmware · Redlioncontrols
6.0.202 · source: NVD
VF
Vt-ipm2m-113-d Firmware · Redlioncontrols
4.9.114 · source: NVD
VF
Vt-ipm2m-213-d Firmware · Redlioncontrols
4.9.114 · source: NVD
VF
Vt-mipm-135-d Firmware · Redlioncontrols
4.9.114 · source: NVD
VF
Vt-mipm-245-d Firmware · Redlioncontrols
4.9.114 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-42770
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-42770
Mitigation
https://https://support.redlion.net/hc/en-us/articles/19339209248269-RLCSIM-2023-05-Authentication-Bypass-and-Remote-Code-Execution
Third Party Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-23-320-01
More from ST-IPm-6350
9.8
CVE-2023-40151
Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function