https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 06:29:24 +0000 https://vulnerability.circl.lu/vuln/bdu:2023-07985 bdu:2023-07985 https://vulnerability.circl.lu/vuln/bdu:2023-07985 https://vulnerability.circl.lu/vuln/cve-2023-40151 <p><strong>Affected:</strong> Red Lion Controls ST-IPm-8460, Red Lion Controls ST-IPm-6350, Red Lion Controls VT-mIPm-135-D, Red Lion Controls VT-mIPm-245-D, Red Lion Controls VT-IPm2m-213-D, Red Lion Controls VT-IPm2m-113-D</p> <p>When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message comes over TCP/IP the RTU will simply accept the message with no authentication challenge.</p> <p><strong>Affected:</strong> Red Lion Controls ST-IPm-8460, Red Lion Controls ST-IPm-6350, Red Lion Controls VT-mIPm-135-D, Red Lion Controls VT-mIPm-245-D, Red Lion Controls VT-IPm2m-213-D, Red Lion Controls VT-IPm2m-113-D</p> <p>When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message comes over TCP/IP the RTU will simply accept the message with no authentication challenge.</p> https://vulnerability.circl.lu/vuln/cve-2023-40151