Vulnerability · Published Oct 9, 2026 · Assigned by icscert
CVE-2026-28745Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format
High 7.5
In plain English
A high-severity security flaw in 700 Series from Red Lion Controls. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.2%top 87.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Lion Controls | 700 Series | 0 – before Firmware Versions 3.11.00 – before Bootloader Versions 2.0.6.1 |
Weakness: CWE-257 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H