Red Lion Crimson
view advisory published 2023-11-02
Successful exploitation of this vulnerability could allow an attacker to truncate passwords configured by the Crimson configuration tool which could create weaker than intended credentials.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-5719US | critical9.8 | — | ||
The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-306-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-306-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationCrimson
Any existing or new accounts created should refrain from using the percent (%) character in the configured password in versions 3.2.0053.18 or below.
- FixedCrimson
Red Lion recommends updating the Crimson configuration tool to version 3.2.0063 or later by using the automatic update feature or visiting the Red Lion website.
https://www.redlion.net/node/16883
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan