Threat database

CVE-2026-33272 affects Red Lion Controls 700 Series switches. A malicious user with physical access can boot the device from factory settings without authentication, use default administrative credentials to gain administrative access, and save persistent configuration changes. This vulnerability allows unauthorized configuration changes but does not impact availability.

CVE-2026-39453 is a vulnerability in Red Lion Controls 700 Series switches where navigating to a specific URL on the device's web server causes it to reboot. This behavior can be exploited to create denial-of-service (DoS) conditions by repeatedly triggering the reboot via automated tools like curl.

CVE-2026-29797 affects Red Lion Controls 700 Series devices by allowing firmware or bootloader updates without any authentication. This vulnerability enables attackers to push malicious files to the device easily. Additionally, attackers with the same software can scan networks for N-Tron devices and push or pull firmware using SNMP/TFTP without authentication.

CVE-2026-33367 is a high-severity vulnerability in Red Lion Controls 700 Series devices where SNMP allows unauthenticated administrative actions. This includes retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades without any authentication.

CVE-2026-28745 affects Red Lion Controls 700 Series devices where usernames and passwords, including default credentials, are stored in configuration files using weak encryption. If an attacker knows the default credentials, they could potentially retrieve other stored credentials. The vulnerability has a high severity score of 7.5 but no known exploits in the wild. No patch or remediation information is currently available.

CVE-2026-39460 affects Red Lion Controls 700 Series devices where usernames and passwords, including default factory credentials, are stored in plaintext within the configuration file. An attacker with administrator rights can view this file via the CLI or export it through a TFTP transfer initiated from the web interface. Additionally, a TFTP transfer can be triggered via SNMP without requiring authentication, increasing the risk of credential exposure.

CVE-2026-32645 is a vulnerability in Red Lion Controls 700 Series where default factory credentials with administrative access remain enabled and persist even after other administrator accounts are configured. This allows an attacker with local access and high privileges to potentially gain unauthorized administrative control. The vulnerability has a medium severity with a CVSS score of 6. No patch or remediation information is currently provided.