Vendor

    Red Lion

    20 known vulnerabilities in products by Red Lion, 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Red Lion
    CriticalCVE-2020-16204

    N-Tron 702-W / 702M12-W: Hidden Functionality

    		9.8
    HighCVE-2017-16544

    BusyBox: Code Execution

    also in 4 other products

    		8.8
    CriticalCVE-2020-16206

    N-Tron 702-W / 702M12-W: Cross-site Scripting

    		9.0
    CriticalCVE-2020-16210

    N-Tron 702-W / 702M12-W: Cross-site Scripting

    		9.0
    CriticalCVE-2016-9335

    Red Lion Controls Sixnet-Managed Industrial Switches: Use of Hard-coded Cryptographic Key

    also in 2 other products

    		10.0
    HighCVE-2020-27279

    Crimson 3.1: NULL Pointer Dereference

    		7.5
    CriticalCVE-2022-1039

    ICSA-22-104-03 Red Lion DA50N

    		9.6
    HighCVE-2017-14855

    Red Lion HMI Panel Firmware: Denial of Service

    		8.6
    HighCVE-2020-16208

    N-Tron 702-W / 702M12-W: Cross-Site Request Forgery (CSRF)

    		8.8
    CriticalCVE-2020-27285

    Crimson 3.1: Missing Authentication for Critical Function

    		9.1
    MediumCVE-2019-10990

    Red Lion Controls Crimson (Windows configuration software): Use of Hard-coded Cryptographic Key

    		6.5
    HighCVE-2019-10984

    Red Lion Controls Crimson (Windows configuration software): Pointer Issues

    		7.8
    HighCVE-2019-10996

    Red Lion Controls Crimson (Windows configuration software): Use After Free

    		7.8
    CriticalCVE-2023-5719

    Red Lion Crimson Improper Neutralization of Null Byte or NUL Character

    		8.8
    HighCVE-2019-10978

    Red Lion Controls Crimson (Windows configuration software): Improper Restriction of Operations within the Bounds of a Memory Buffer

    		7.8
    HighCVE-2022-3090

    Red Lion Controls Crimson 3.0: Path Traversal

    also in 1 other product

    		7.5
    MediumCVE-2020-27283

    Crimson 3.1: Improper Resource Shutdown or Release

    		5.3
    HighCVE-2022-26516

    ICSA-22-104-03 Red Lion DA50N

    		8.4
    MediumCVE-2022-27179

    ICSA-22-104-03 Red Lion DA50N

    		4.6
    MediumCVE-2023-34412

    Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250

    also in 2 other products

    		4.8

    Products

    Products by Red Lion
    Red Lion Controls Crimson (Windows configuration software)90
    N-tron 702m12-w Firmware50
    N-tron 702-w Firmware50
    Da50n Firmware30