Description
A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Lion Controls 700 Series
Default version status: unaffected
0 to < Firmware Versions 3.11.0affected0 to < Bootloader Versions 2.0.6.1affected3.11.1unaffected