Description (CNA)
SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Lion Controls / 700 Series | affected 0 before Firmware Versions 3.11.0; affected 0 before Bootloader Versions 2.0.6.1; unaffected 3.11.1 |
CWE
CWE-306
References
- https://www.hms-networks.com/
- https://www.hms-networks.com/cybersecurity
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json
ADP enrichment
No English description supplied.
No references supplied.