CVE-2026-33272Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or Channel
Updated under an hour ago ()
Does this affect you?
It affects Red Lion Controls 700 Series. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.
- CVSS
- 4.9 MEDIUM (v3.1, CNA)CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
- Weakness (CWE)
- CWE-288
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- icscert
- NVD analysis
- Awaiting Analysis
- Record last updated
- Oct 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Red Lion Controls 700 Series red_lion_controls:700_series (from the name) | before Firmware Versions 3.11.0; before Bootloader Versions 2.0.6.1; 3.11.1 not affected | CNA record |
References
- https://www.hms-networks.com/
- https://www.hms-networks.com/cybersecurity
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.