Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-28745

Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Lion Controls 700 Series

Default version status: unaffected

  • 0 to < Firmware Versions 3.11.0affected
  • 0 to < Bootloader Versions 2.0.6.1affected
  • 3.11.1unaffected

References