RE
Vendor
Redlion
22 products with CVEs on record
40
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2023-5719
CR
Crimson
Redlion
9.8
1%
Nov 6The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to…
CVE-2023-34412
MR
Mbnet.rokey Rkh 210 Firmware
Redlion
4.8
0%
Aug 17A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high…
CVE-2022-3090
CR
Crimson
Redlion
5.3
1%
Nov 17Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and prior are vulnerable to path traversal
CVE-2022-27179
DF
Da50n Firmware
Redlion
6.5
1%
Apr 20A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource
CVE-2022-26516
DF
Da50n Firmware
Redlion
7.8
0%
Apr 20Authorized users may install a maliciously modified package file when updating the device via the web user interface
CVE-2022-1039
DF
Da50n Firmware
Redlion
9.8
1%
Apr 20The weak password on the web user interface can be exploited via HTTP or HTTPS
CVE-2020-27283
CR
Crimson
Redlion
5.3
1%
Jan 6An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locations
CVE-2020-27279
CR
Crimson
Redlion
7.5
2%
Jan 6A NULL pointer deference vulnerability has been identified in the protocol converter
CVE-2020-27285
CR
Crimson
Redlion
9.1
1%
Jan 6The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without authentication
CVE-2020-16210
N7
N-tron 702-w Firmware
Redlion
9.0
3%
Sep 1The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an…
CVE-2020-16208
N7
N-tron 702-w Firmware
Redlion
8.8
1%
Sep 1The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to…
CVE-2020-16206
N7
N-tron 702-w Firmware
Redlion
9.0
3%
Sep 1The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron…
CVE-2020-16204
N7
N-tron 702-w Firmware
Redlion
9.8
5%
Sep 1The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W…
CVE-2019-10996
CR
Crimson
Redlion
7.8
1%
Sep 23Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially…
CVE-2019-10990
CR
Crimson
Redlion
6.5
1%
Sep 23Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may…
CVE-2019-10984
CR
Crimson
Redlion
7.8
1%
Sep 23Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially…
CVE-2019-10978
CR
Crimson
Redlion
7.8
1%
Sep 23Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially…
CVE-2016-9335
SI
Sixnet-managed Industrial Switches Firmware
Redlion
10.0
2%
May 9A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and Stride-Managed Ethernet…
CVE-2017-14855
HP
Hmi Panel Firmware
Redlion
8.6
1%
Dec 30Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that does not exist, as demonstrated by version…
CVE-2017-16544
N7
N-tron 702-w Firmware
Redlion
8.8
6%
Nov 20In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not…