Red Lion Crimson 3.1
Advisory ansehen veröffentlicht 2021-01-05
Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service condition, read and modify the database, and leak memory data.
01
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-27283US | medium5.3 | — | ||
An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locations. | ||||
| CVE-2020-27279US | high7.5 | — | ||
A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson… | ||||
| CVE-2020-27285US | critical9.1OT erhöht | — | ||
The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without authentication. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (3)
- MitigationCrimson 3.1
Red Lion recommends users update to build 3119.001 or later.
https://www.redlion.net/support/software-firmware/red-lion-software/crimson/crimson-31 - MitigationCrimson 3.1
Red Lion recommends users update to build 3119.001 or later.
https://www.redlion.net/support/software-firmware/red-lion-software/crimson/crimson-31 - MitigationCrimson 3.1
Red Lion recommends users update to build 3119.001 or later.
https://www.redlion.net/support/software-firmware/red-lion-software/crimson/crimson-31
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan