Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control

🗓️ 15 Oct 2025 06:50:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 11 Views

Two CVSS 10.0 flaws in Red Lion Sixnet remote terminal units allow unauthenticated root code execution.

Reporter	Title	Published	Views	Family All 24
BDU FSTEC	The vulnerability of the UDR-A authentication function in microprogrammed control devices like Red Lion SixTRAK and VersaTRAK allows attackers to execute arbitrary commands with administrative privileges.	22 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the UDR-A authentication function in microprogrammed control devices like Red Lion SixTRAK and VersaTRAK allows attackers to execute arbitrary commands with administrative privileges.	4 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-40151	15 Oct 202504:50	–	circl
Circl	CVE-2023-42770	11 Jun 202514:31	–	circl
CNNVD	Red Lion Controls SixTRAK and VersaTRAK Security Vulnerabilities	20 Nov 202300:00	–	cnnvd
CNNVD	Red Lion Controls SixTRAK and VersaTRAK Access Control Error Vulnerability	21 Nov 202300:00	–	cnnvd
CVE	CVE-2023-40151	21 Nov 202300:11	–	cve
CVE	CVE-2023-42770	21 Nov 202300:14	–	cve
Cvelist	CVE-2023-40151 Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function	21 Nov 202300:11	–	cvelist
Cvelist	CVE-2023-42770 Red Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel	21 Nov 202300:14	–	cvelist

15 Oct 2025 06:50Current

9High risk

Vulners AI Score9

CVSS 3.19.8 - 10

EPSS0.01149

SSVC

Red Lion Sixnet remote terminal unit authentication bypass root privileges industrial control systems