CVE-2022-27179

CVE-2022-27179 is associated with Red Lion DA50N gateways, where an attacker with access to an exported configuration file may obtain stored credentials and access protected resources. The connected ICS advisory (CISA ICSA-22-104-03) ties this vulnerability to insecure credential handling (cited ...

CVE-2022-27179 ICSA-22-104-03 Red Lion DA50N

A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised...

Red Lion DA50N

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Red Lion Equipment: DA50N Vulnerabilities: Insufficient Verification of Data Authenticity, Weak Password Requirements, Use of Unmaintained Third-Party Components, Insufficiently Protected Credentials 2...