CVE-2023-42770

🗓️ 21 Nov 2023 00:14:18Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 49 Views

Red Lion SixTRAK, VersaTRAK Series RTUs with authenticated users enabled (UDR-A) face authentication bypass over TCP/I

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-42770	11 Jun 202514:31	–	circl
CNNVD	Red Lion Controls SixTRAK and VersaTRAK Access Control Error Vulnerability	21 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-42770 Red Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel	21 Nov 202300:14	–	cvelist
EUVD	EUVD-2023-47202	3 Oct 202520:07	–	euvd
ICS	Red Lion Sixnet RTUs	16 Nov 202307:00	–	ics
NVD	CVE-2023-42770	21 Nov 202301:15	–	nvd
Prion	Authentication flaw	21 Nov 202301:15	–	prion
Positive Technologies	PT-2023-7324 · Red Lion · Red Lion Versatrak +1	16 Nov 202300:00	–	ptsecurity
The Hacker News	⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & More	20 Oct 202512:27	–	thn
The Hacker News	Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control	15 Oct 202506:50	–	thn

NVD

Vulners

Node

redlioncontrols st-ipm-6350_firmwareMatch4.9.114

AND

redlioncontrols st-ipm-6350Match-

Node

redlioncontrols st-ipm-8460_firmwareMatch6.0.202

AND

redlioncontrols st-ipm-8460Match-

Node

redlioncontrols vt-mipm-135-d_firmwareMatch4.9.114

AND

redlioncontrols vt-mipm-135-dMatch-

Node

redlioncontrols vt-mipm-245-d_firmwareMatch4.9.114

AND

redlioncontrols vt-mipm-245-dMatch-

Node

redlioncontrols vt-ipm2m-213-d_firmwareMatch4.9.114

AND

redlioncontrols vt-ipm2m-213-dMatch-

Node

redlioncontrols vt-ipm2m-113-d_firmwareMatch4.9.114

AND

redlioncontrols vt-ipm2m-113-dMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "ST-IPm-8460",
    "vendor": "Red Lion Controls",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.202"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ST-IPm-6350",
    "vendor": "Red Lion Controls",
    "versions": [
      {
        "status": "affected",
        "version": "4.9.114"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VT-mIPm-135-D",
    "vendor": "Red Lion Controls",
    "versions": [
      {
        "status": "affected",
        "version": "4.9.114"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VT-mIPm-245-D",
    "vendor": "Red Lion Controls",
    "versions": [
      {
        "status": "affected",
        "version": "4.9.114"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VT-IPm2m-213-D",
    "vendor": "Red Lion Controls",
    "versions": [
      {
        "status": "affected",
        "version": "4.9.114"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "VT-IPm2m-113-D",
    "vendor": "Red Lion Controls",
    "versions": [
      {
        "status": "affected",
        "version": "4.9.114"
      }
    ]
  }
]

Source	Link
https	www.https//support.redlion.net/hc/en-us/articles/19339209248269-RLCSIM-2023-05-Authentication-Bypass-and-Remote-Code-Execution
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-320-01

21 Nov 2024 08:23Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8 - 10

EPSS0.00157

SSVC