Red Lion Controls N-Tron 700 Series

CISA published an ICS advisory (ICSA-26-281-01) disclosing seven vulnerabilities in Red Lion Controls N-Tron 700 Series industrial switches affecting firmware versions up to 3.11.0 and bootloader versions up to 2.0.6.1. The vulnerabilities include hard-coded credentials, plaintext password storage, weak credential encryption, missing authentication for SNMP-based administrative functions, unauthenticated firmware update capability, a reachable assertion enabling DoS via URL-triggered reboots, and an authentication bypass via physical access. Successful exploitation could allow attackers to gain administrative access, view/edit/upload configuration files, push malicious firmware, or cause continuous device reboots. CVSS v3 scores range from 4.9 to 8.3, with CVSS v4 scores reaching up to 9.3 (Critical). The vulnerabilities affect critical infrastructure sectors including Commercial Facilities, Communications, Critical Manufacturing, and Information Technology, with worldwide deployment. Remediation includes upgrading to firmware version 3.11.1 or greater, disabling/configuring SNMP communities, and disabling web GUI access. The vulnerabilities were reported by Gabrianna (Ria) Milloway of Idaho National Laboratory. No known public exploitation has been reported at the time of publication.