Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-29797

Red Lion Controls N-Tron 700 Series Download of Code Without Integrity Check

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating by using SNMP/TFTP.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Lion Controls 700 Series

Default version status: unaffected

  • 0 to < Firmware Versions 3.11.0affected
  • 0 to < Bootloader Versions 2.0.6.1affected
  • 3.11.1unaffected

References