redlion records

21 published records for vendor redlion.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 9.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

21 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2020-16204No exploit	The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as redlion · n-tron 702-w firmware · CWE-912 Pre-auth	Critical9.8	—	5.4%	Sep 1, 2020
40Plan	CVE-2016-9335No exploit	A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Versionredlion · sixnet-managed industrial switches firmware · CWE-321 Pre-auth Hard-coded credentials	Critical10.0	—	1.5%	May 9, 2018
39Monitor	CVE-2022-1039No exploit	ICSA-22-104-03 Red Lion DA50Nredlion · da50n firmware · CWE-521 Pre-auth	Critical9.8	—	1.2%	Apr 20, 2022
39Monitor	CVE-2023-5719No exploit	Red Lion Crimson Improper Neutralization of Null Byte or NUL Characterredlion · crimson · CWE-158 Pre-auth	Critical9.8	—	0.5%	Nov 6, 2023
37Monitor	CVE-2017-16544No exploit	In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of fibusybox · busybox · CWE-94 RCE	High8.8	—	6.1%	Nov 20, 2017
37Monitor	CVE-2020-16210No exploit	The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perredlion · n-tron 702-w firmware · CWE-79 RCE XSS	Critical9.0	—	3.2%	Sep 1, 2020
37Monitor	CVE-2020-16206No exploit	The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain acredlion · n-tron 702-w firmware · CWE-79 RCE XSS	Critical9.0	—	3.2%	Sep 1, 2020
36Monitor	CVE-2020-27285No exploit	The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database withoutredlion · crimson · CWE-306 Pre-auth Auth bypass	Critical9.1	—	0.9%	Jan 6, 2021
35Monitor	CVE-2020-16208No exploit	The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a deviceredlion · n-tron 702-w firmware · CWE-352 Pre-auth CSRF	High8.8	—	1.2%	Sep 1, 2020
34Monitor	CVE-2017-14855No exploit	Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that doeredlion · hmi panel firmware Pre-auth Denial of service	High8.6	—	1.3%	Dec 30, 2017
31Monitor	CVE-2020-27279No exploit	A NULL pointer deference vulnerability has been identified in the protocol converter.redlion · crimson · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	1.7%	Jan 6, 2021
31Monitor	CVE-2019-10996No exploit	Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited whredlion · crimson · CWE-416 Memory safety	High7.8	—	1.0%	Sep 23, 2019
31Monitor	CVE-2019-10984No exploit	Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited whredlion · crimson · CWE-465	High7.8	—	1.0%	Sep 23, 2019
31Monitor	CVE-2019-10978No exploit	Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited whredlion · crimson · CWE-119 Memory safety	High7.8	—	0.8%	Sep 23, 2019
31Monitor	CVE-2022-26516No exploit	ICSA-22-104-03 Red Lion DA50Nredlion · da50n firmware · CWE-345	High7.8	—	0.3%	Apr 20, 2022
28Monitor	CVE-2024-5672No exploit	Red Lion Europe: mbNET.mini vulnerable to OS command injectionred lion europe · mbnet.mini · CWE-78 RCE Command injection	High7.2	—	1.2%	Jul 3, 2024
26Monitor	CVE-2019-10990No exploit	Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected fredlion · crimson · CWE-321 Pre-auth Hard-coded credentials	Medium6.5	—	1.3%	Sep 23, 2019
26Monitor	CVE-2022-27179No exploit	ICSA-22-104-03 Red Lion DA50Nredlion · da50n firmware · CWE-522 Info leak	Medium6.5	—	0.5%	Apr 20, 2022
21Monitor	CVE-2020-27283No exploit	An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locatiredlion · crimson · CWE-404 Pre-auth	Medium5.3	—	0.9%	Jan 6, 2021
21Monitor	CVE-2022-3090No exploit	Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and predlion · crimson · CWE-22 Pre-auth Path traversal	Medium5.3	—	0.6%	Nov 17, 2022
19Monitor	CVE-2023-34412No exploit	Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250helmholz · rex 250 firmware · CWE-79 XSS	Medium4.8	—	0.4%	Aug 17, 2023

CVE-2020-16204
41Plan
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as
CriticalCVSS 9.8No exploitEPSS 5%
- Pre-auth
redlion · n-tron 702-w firmwareSep 1, 2020
CVE-2016-9335
40Plan
A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version
CriticalCVSS 10.0No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
redlion · sixnet-managed industrial switches firmwareMay 9, 2018
CVE-2022-1039
39Monitor
ICSA-22-104-03 Red Lion DA50N
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
redlion · da50n firmwareApr 20, 2022
CVE-2023-5719
39Monitor
Red Lion Crimson Improper Neutralization of Null Byte or NUL Character
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
redlion · crimsonNov 6, 2023
CVE-2017-16544
37Monitor
In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of fi
HighCVSS 8.8No exploitEPSS 6%
- RCE
busybox · busyboxNov 20, 2017
CVE-2020-16210
37Monitor
The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and per
CriticalCVSS 9.0No exploitEPSS 3%
- RCE
- XSS
redlion · n-tron 702-w firmwareSep 1, 2020
CVE-2020-16206
37Monitor
The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain ac
CriticalCVSS 9.0No exploitEPSS 3%
- RCE
- XSS
redlion · n-tron 702-w firmwareSep 1, 2020
CVE-2020-27285
36Monitor
The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
redlion · crimsonJan 6, 2021
CVE-2020-16208
35Monitor
The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- CSRF
redlion · n-tron 702-w firmwareSep 1, 2020
CVE-2017-14855
34Monitor
Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that doe
HighCVSS 8.6No exploitEPSS 1%
- Pre-auth
- Denial of service
redlion · hmi panel firmwareDec 30, 2017
CVE-2020-27279
31Monitor
A NULL pointer deference vulnerability has been identified in the protocol converter.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
redlion · crimsonJan 6, 2021
CVE-2019-10996
31Monitor
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited wh
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
redlion · crimsonSep 23, 2019
CVE-2019-10984
31Monitor
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited wh
HighCVSS 7.8No exploitEPSS 1%
redlion · crimsonSep 23, 2019
CVE-2019-10978
31Monitor
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited wh
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
redlion · crimsonSep 23, 2019
CVE-2022-26516
31Monitor
ICSA-22-104-03 Red Lion DA50N
HighCVSS 7.8No exploitEPSS 0%
redlion · da50n firmwareApr 20, 2022
CVE-2024-5672
28Monitor
Red Lion Europe: mbNET.mini vulnerable to OS command injection
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Command injection
red lion europe · mbnet.miniJul 3, 2024
CVE-2019-10990
26Monitor
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected f
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
redlion · crimsonSep 23, 2019
CVE-2022-27179
26Monitor
ICSA-22-104-03 Red Lion DA50N
MediumCVSS 6.5No exploitEPSS 0%
- Info leak
redlion · da50n firmwareApr 20, 2022
CVE-2020-27283
21Monitor
An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locati
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
redlion · crimsonJan 6, 2021
CVE-2022-3090
21Monitor
Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and p
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Path traversal
redlion · crimsonNov 17, 2022
CVE-2023-34412
19Monitor
Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250
MediumCVSS 4.8No exploitEPSS 0%
- XSS
helmholz · rex 250 firmwareAug 17, 2023