CVE-2019-10990 — n/a / Red Lion Controls Crimson (Windows configuration software)

CVE-2019-10990

n/a / Red Lion Controls Crimson (Windows configuration software) PUBLISHED

Description (CNA)

Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may allow an attacker to access configuration files.

Affected (CNA)

Vendor / product	Versions
n/a / Red Lion Controls Crimson (Windows configuration software)	affected Version 3.0 and prior, Version 3.1 prior to release 3112.00

CWE

CWE-321

References

https://www.us-cert.gov/ics/advisories/icsa-19-248-01

ADP enrichment

CVE

No English description supplied.

https://www.us-cert.gov/ics/advisories/icsa-19-248-01

CISA-ADP

No English description supplied.

No references supplied.