CVE-2026-29797: fallo de gravedad alta en Red Lion Controls 700 Series
Red Lion Controls N-Tron 700 Series Download of Code Without Integrity Check
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.4epss 0.2%
No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating by using SNMP/TFTP.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N
Productos afectados
Red Lion Controls · 700 SeriesCVEs relacionadas — Red Lion Controls 700 Series
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-39460CRITICALRed Lion Controls N-Tron 700 Series Insufficiently Protected CredentialsEPSS 0.3%CVE-2026-33367CRITICALRed Lion Controls N-Tron 700 Series Missing Authentication for Critical FunctionEPSS 0.3%CVE-2026-39453HIGHRed Lion Controls N-Tron 700 Series Reachable AssertionEPSS 0.3%CVE-2026-28745CRITICALRed Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable FormatEPSS 0.2%CVE-2026-33272MEDIUMRed Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or ChannelEPSS 0.1%CVE-2026-32645CRITICALRed Lion Controls N-Tron 700 Series Use of Hard-Coded CredentialsEPSS 0.1%