Vulnerability · Published Nov 21, 2023 · Assigned by icscert
CVE-2023-40151Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function
Critical 10.0
In plain English
A critical-severity security flaw in ST-IPm-6350 from Red Lion Controls. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities).
Official description
When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message comes over TCP/IP the RTU will simply accept the message with no authentication challenge.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Lion Controls | ST-IPm-8460 | 6.0.202 |
| Red Lion Controls | ST-IPm-6350 | 4.9.114 |
| Red Lion Controls | VT-mIPm-135-D | 4.9.114 |
| Red Lion Controls | VT-mIPm-245-D | 4.9.114 |
| Red Lion Controls | VT-IPm2m-213-D | 4.9.114 |
| Red Lion Controls | VT-IPm2m-113-D | 4.9.114 |
Weakness: CWE-749 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H