Red Lion Crimson 3.1
view advisory published 2021-01-05
Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service condition, read and modify the database, and leak memory data.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-27283US | medium5.3 | — | ||
An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locations. | ||||
| CVE-2020-27279US | high7.5 | — | ||
A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson… | ||||
| CVE-2020-27285US | critical9.1OT elevated | — | ||
The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without authentication. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (3)
- MitigationCrimson 3.1
Red Lion recommends users update to build 3119.001 or later.
https://www.redlion.net/support/software-firmware/red-lion-software/crimson/crimson-31 - MitigationCrimson 3.1
Red Lion recommends users update to build 3119.001 or later.
https://www.redlion.net/support/software-firmware/red-lion-software/crimson/crimson-31 - MitigationCrimson 3.1
Red Lion recommends users update to build 3119.001 or later.
https://www.redlion.net/support/software-firmware/red-lion-software/crimson/crimson-31
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan