Redlion vulnerabilitiesNone on the known-exploited list.
Redlion has 20 published vulnerabilities across 121 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Crimson, with 9. If you run Redlion software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Redlion products have the most vulnerabilities?
Crimson leads with 9 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Redlion vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Redlion's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Redlion flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 6.1%CVE-2017-16544High
In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing...
- 5.5%CVE-2020-16204Critical
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all versions).
- 3.2%CVE-2020-16210Critical
The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tron 702-W /...
- 3.2%CVE-2020-16206Critical
The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W (all versions).
- 1.8%CVE-2020-27279High
A NULL pointer deference vulnerability has been identified in the protocol converter.
- 1.6%CVE-2016-9335Critical
A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and Stride-Managed Ethernet Switches running firmware Version 5.0.190.
- 1.4%CVE-2017-14855High
Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that does not exist, as demonstrated by version HMI 2.41 PLC 2.42.
- 1.3%CVE-2019-10990Medium
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may allow an attacker to access...
- 1.2%CVE-2020-16208High
The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link on the N-Tron...
- 1.2%CVE-2022-1039Critical
The weak password on the web user interface can be exploited via HTTP or HTTPS.
All Redlion products we track.
8 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Crimsoncrimson9 vulnerabilities6 versions
- HMI Panel Firmwarehmi_panel_firmware1 vulnerability1 version
- Mbnet.rokey Rkh 210 Firmwarembnet.rokey_rkh_210_firmware1 vulnerability1 version
- Mbnet.rokey Rkh 216 Firmwarembnet.rokey_rkh_216_firmware1 vulnerability1 version
- Mbnet.rokey Rkh 235 Firmwarembnet.rokey_rkh_235_firmware1 vulnerability1 version
- Mbnet.rokey Rkh 259 Firmwarembnet.rokey_rkh_259_firmware1 vulnerability1 version
- Sixnet-Managed Industrial Switches Firmwaresixnet-managed_industrial_switches_firmware1 vulnerability44 versions
- Stride-Managed Ethernet Switches Firmwarestride-managed_ethernet_switches_firmware1 vulnerability45 versions
This directory lists the 8 Redlion products with at least one tracked version, of 121 in our catalogue.
Running Redlion? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.
- Matched to
- Redlion on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 20 published vulnerabilities across 121 products and 100 versions from Redlion.
None of Redlion's vulnerabilities is on the list of flaws known to be exploited today.
Crimson, with 9 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Redlion products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.