A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.
14 Affected Products
Red Lion Controls 700 Series: <=Firmware_3.11.0
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Red Lion Controls 700 Series: <=Bootloader_2.0.6.1
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Red Lion Controls 700 Series: <=Firmware_3.11.0
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Red Lion Controls 700 Series: <=Bootloader_2.0.6.1
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Red Lion Controls 700 Series: <=Firmware_3.11.0
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Red Lion Controls 700 Series: <=Bootloader_2.0.6.1
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Red Lion Controls 700 Series: <=Firmware_3.11.0
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Red Lion Controls 700 Series: <=Bootloader_2.0.6.1
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Red Lion Controls 700 Series: <=Firmware_3.11.0
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Red Lion Controls 700 Series: <=Bootloader_2.0.6.1
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Red Lion Controls 700 Series: <=Firmware_3.11.0
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Red Lion Controls 700 Series: <=Bootloader_2.0.6.1
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Red Lion Controls 700 Series: <=Firmware_3.11.0
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Red Lion Controls 700 Series: <=Bootloader_2.0.6.1
Product Status: known_affected
Remediations
Vendor fix
Red Lion controls recommends the following upgrades for the N-Tron 700 Series:
Mitigation
Upgrade to firmware version 3.11.1 or greater
Mitigation
Configure or disable the SNMP communities
Mitigation
Disable access to the web GUI
Mitigation
The upgrade procedure document can be viewed here..
Mitigation
The advisory issued by HMS Networks regarding these vulnerabilities can be viewed here
Additional Metrics
Relevant CWE: CWE-288 Authentication Bypass Using an Alternate Path or Channel