CVE-2022-3090 — Red Lion Controls / Crimson 3.0

Description (CNA)

Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and prior are vulnerable to path traversal. When attempting to open a file using a specific path, the user's password hash is sent to an arbitrary host. This could allow an attacker to obtain user credential hashes.

Affected (CNA)

Vendor / product	Versions
Red Lion Controls / Crimson 3.0	affected All versions through 707.000
Red Lion Controls / Crimson 3.1	affected All versions through 3126.001
Red Lion Controls / Crimson 3.2	affected All versions through 3.2.0044.0

CWE

CWE-22

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-321-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-321-01

CISA-ADP

No English description supplied.

No references supplied.