CVE-2026-32645: CWE-798 in Red Lion Controls 700 Series

This vulnerability (CVE-2026-32645) involves the persistence of default factory credentials with administrative privileges on Red Lion Controls 700 Series devices. These default credentials remain active even after additional administrator accounts are set up, which can allow an attacker with local access to authenticate with high privileges using known default credentials. The CVSS 3.1 vector indicates low attack complexity and requires high privileges but no user interaction, with high confidentiality and integrity impact and no availability impact.

An attacker with local access to the affected device can use the default factory credentials to gain administrative access, potentially compromising confidentiality and integrity of the device's data and operations. This could lead to unauthorized control or manipulation of the device settings. There is no indication of remote exploitation or availability impact from the provided data.

No official patch or remediation is currently documented. Since default credentials persist despite configuration of other accounts, users should consult Red Lion Controls for updated guidance or firmware updates. Until a fix is available, physical security controls and restricting local access to the device are recommended to mitigate risk.