CVE-2026-33272: medium-severity vulnerability in Red Lion Controls 700 Series
Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or Channel
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.8epss 0.1%
A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.
CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N
Affected products
Red Lion Controls · 700 SeriesRelated CVEs — Red Lion Controls 700 Series
In the same product, most dangerous first.
CVE-2026-39460CRITICALRed Lion Controls N-Tron 700 Series Insufficiently Protected CredentialsEPSS 0.3%CVE-2026-33367CRITICALRed Lion Controls N-Tron 700 Series Missing Authentication for Critical FunctionEPSS 0.3%CVE-2026-39453HIGHRed Lion Controls N-Tron 700 Series Reachable AssertionEPSS 0.3%CVE-2026-28745CRITICALRed Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable FormatEPSS 0.2%CVE-2026-29797HIGHRed Lion Controls N-Tron 700 Series Download of Code Without Integrity CheckEPSS 0.2%CVE-2026-32645CRITICALRed Lion Controls N-Tron 700 Series Use of Hard-Coded CredentialsEPSS 0.1%