CR
Product
Crimson
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 3Low 0
Watch
Add Crimson to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-10990 | 6.5 | Sep 23 | Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may… Affected: through 3.0; 3.1 before 3112.00 |
| CVE-2022-3090 | 5.3 | Nov 17 | Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and prior are vulnerable to path traversal Affected: before 3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +34 more |
| CVE-2020-27283 | 5.3 | Jan 6 | An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locations Affected: 3.1 |
Showing 3