CR
Product
Crimson
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 3Low 0
Watch
Add Crimson to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5719 | 9.8 | Nov 6 | The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to… Affected: before 3.2; 3.2; 3.2; 3.2; 3.2; 3.2; +16 more |
| CVE-2020-27285 | 9.1 | Jan 6 | The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without authentication Affected: 3.1 |
| CVE-2019-10996 | 7.8 | Sep 23 | Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially… Affected: through 3.0; 3.1 before 3112.00 |
| CVE-2019-10984 | 7.8 | Sep 23 | Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially… Affected: through 3.0; 3.1 before 3112.00 |
| CVE-2019-10978 | 7.8 | Sep 23 | Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially… Affected: through 3.0; 3.1 before 3112.00 |
| CVE-2020-27279 | 7.5 | Jan 6 | A NULL pointer deference vulnerability has been identified in the protocol converter Affected: 3.1 |
| CVE-2019-10990 | 6.5 | Sep 23 | Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may… Affected: through 3.0; 3.1 before 3112.00 |
| CVE-2022-3090 | 5.3 | Nov 17 | Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and prior are vulnerable to path traversal Affected: before 3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +34 more |
| CVE-2020-27283 | 5.3 | Jan 6 | An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locations Affected: 3.1 |
Showing 9