Lucene search
+L

633 matches found

CNVD
CNVD
added 2019/09/06 12:00 a.m.17 views

Red Lion Controls Crimson Buffer Overflow Vulnerability

Red Lion Controls Crimson is the American Red Lion Controls Red Lion Controls company's set of human-machine interface programming software. Red Lion Controls Crimson suffers from a buffer overflow vulnerability. An attacker could exploit this vulnerability to cause a buffer overflow or heap...

7.8CVSS7.3AI score0.00868EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/09/06 12:00 a.m.14 views

Red Lion Controls Crimson Trust Management Issue Vulnerability

Red Lion Controls Crimson is the American Red Lion Controls Red Lion Controls company's set of human-machine interface programming software. Red Lion Controls Crimson is vulnerable to a trust management issue. An attacker could use this vulnerability to attack affected components via default...

6.5CVSS6.9AI score0.01341EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/09/06 12:00 a.m.16 views

Red Lion Controls Crimson Resource Management Error Vulnerability

Red Lion Controls Crimson is the American Red Lion Controls Red Lion Controls company's set of human-machine interface programming software. Red Lion Controls Crimson suffers from a resource management error vulnerability, no details of the vulnerability are available at this time...

7.8CVSS6.9AI score0.0101EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/09/05 12:00 a.m.13 views

PT-2019-12118 · Red Lion Controls · Crimson

Name of the Vulnerable Software and Affected Versions: Red Lion Controls Crimson versions 3.0 and prior Red Lion Controls Crimson version 3.1 prior to release 3112.00 Description: The issue allows multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious inpu...

7.8CVSS8AI score0.00868EPSS
SaveExploits0References9
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.37 views

Red Lion Crimson CD3 File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.4AI score0.0101EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.27 views

Red Lion Crimson CD31 File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.4AI score0.0101EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.29 views

Red Lion Crimson CD31 File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.3AI score0.0101EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.35 views

Red Lion Crimson CD31 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.9AI score0.00868EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.21 views

Red Lion Crimson CD31 File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CD...

7.8CVSS4.9AI score0.00868EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.26 views

Red Lion Crimson CD31 File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.4AI score0.0101EPSS
SaveExploits0References1
ICS
ICS
added 2019/09/05 12:00 a.m.110 views

Red Lion Controls Crimson

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Red Lion Controls Equipment: Crimson Windows configuration software Vulnerabilities: Use After Free, Improper Restriction of Operations within the Bounds of a Memory Buffer, Pointer Issues, Use of...

7.8CVSS7.8AI score0.01341EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.29 views

Red Lion Crimson CD3 File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CD...

7.8CVSS6AI score0.0101EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.41 views

Red Lion Crimson Hard-coded Cryptographic Key Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Red Lion Crimson. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CTextStreamMemory class. The class contains hard-coded secrets in clear tex...

6.5CVSS1.8AI score0.01341EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.32 views

Red Lion Crimson CD31 File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CD...

7.8CVSS5.1AI score0.0101EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.22 views

Red Lion Crimson CD31 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.9AI score0.00868EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.22 views

Red Lion Crimson CD3 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of C...

7.8CVSS5.1AI score0.00868EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.34 views

Red Lion Crimson CD3 File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CD...

7.8CVSS5AI score0.0101EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.18 views

Red Lion Crimson CD31 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.9AI score0.00868EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/09/05 12:00 a.m.18 views

PT-2019-12124 · Red Lion Controls · Crimson

Name of the Vulnerable Software and Affected Versions: Red Lion Controls Crimson versions 3.0 and prior Red Lion Controls Crimson version 3.1 prior to release 3112.00 Description: The issue allows an attacker to access configuration files due to the use of a hard-coded password for encrypting...

6.5CVSS6.5AI score0.01341EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2019/09/05 12:00 a.m.40 views

Red Lion Crimson CD31 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Red Lion Crimson. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.9AI score0.00868EPSS
SaveExploits0References1
Rows per page
Query Builder