[ Vendor · 7 CVEs ]
Red Lion Controls
CVEs affecting Red Lion Controls published in the last 30 days, plus any Red Lion Controls CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-32645 | 9 Oct 2026 | CVSS 6.0 | Red Lion Controls 700 SeriesDefault factory credentials with administrative access are enabled and persist even after configuring other administrator accounts. | |
| CVE-2026-33272 | 9 Oct 2026 | CVSS 4.9 | Red Lion Controls 700 SeriesA malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative… | |
| CVE-2026-33367 | 9 Oct 2026 | CVSS 8.1 | Red Lion Controls 700 SeriesSNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating… | |
| CVE-2026-39453 | 9 Oct 2026 | CVSS 8.3 | Red Lion Controls 700 SeriesNavigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS… | |
| CVE-2026-39460 | 9 Oct 2026 | CVSS 8.1 | Red Lion Controls 700 SeriesUsernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrator rights… | |
| CVE-2026-28745 | 9 Oct 2026 | CVSS 7.5 | Red Lion Controls 700 SeriesUsernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials… | |
| CVE-2026-29797 | 9 Oct 2026 | CVSS 7.1 | Red Lion Controls 700 SeriesNo authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally… |