CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
39.1%
The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent (%) character, invalid values will be included, potentially truncating the string if a NUL is encountered. If the simplified password is not detected by the administrator, the device might be left in a vulnerable state as a result of more-easily compromised credentials. Note that passwords entered via the Crimson system web server do not suffer from this vulnerability.
Vendor | Product | Version | CPE |
---|---|---|---|
redlion | crimson | * | cpe:2.3:a:redlion:crimson:*:*:*:*:*:*:*:* |
redlion | crimson | 3.2 | cpe:2.3:a:redlion:crimson:3.2:build_3.2.0008.0:*:*:*:*:*:* |
redlion | crimson | 3.2 | cpe:2.3:a:redlion:crimson:3.2:build_3.2.0014.0:*:*:*:*:*:* |
redlion | crimson | 3.2 | cpe:2.3:a:redlion:crimson:3.2:build_3.2.0015.0:*:*:*:*:*:* |
redlion | crimson | 3.2 | cpe:2.3:a:redlion:crimson:3.2:build_3.2.0016.0:*:*:*:*:*:* |
redlion | crimson | 3.2 | cpe:2.3:a:redlion:crimson:3.2:build_3.2.0020.0:*:*:*:*:*:* |
redlion | crimson | 3.2 | cpe:2.3:a:redlion:crimson:3.2:build_3.2.0021.0:*:*:*:*:*:* |
redlion | crimson | 3.2 | cpe:2.3:a:redlion:crimson:3.2:build_3.2.0025.0:*:*:*:*:*:* |
redlion | crimson | 3.2 | cpe:2.3:a:redlion:crimson:3.2:build_3.2.0026.0:*:*:*:*:*:* |
redlion | crimson | 3.2 | cpe:2.3:a:redlion:crimson:3.2:build_3.2.0030.0:*:*:*:*:*:* |
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
39.1%