Red Lion Controls 700 Series
7 CVEs affecting Red Lion Controls 700 Series. Latest disclosed: 2026-10-09. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-39453 | High | 8.3 | 2026-10-09 | Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where… |
CVE-2026-39460 | High | 8.1 | 2026-10-09 | Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrator rights, the confi… |
CVE-2026-33367 | High | 8.1 | 2026-10-09 | SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware… |
CVE-2026-28745 | High | 7.5 | 2026-10-09 | Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by… |
CVE-2026-29797 | High | 7.1 | 2026-10-09 | No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with th… |
CVE-2026-32645 | Medium | 6.0 | 2026-10-09 | Default factory credentials with administrative access are enabled and persist even after configuring other administrator accounts. |
CVE-2026-33272 | Medium | 4.9 | 2026-10-09 | A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credential… |