Vulnerability · Published Oct 9, 2026 · Assigned by icscert
CVE-2026-29797Red Lion Controls N-Tron 700 Series Download of Code Without Integrity Check
High 7.1
In plain English
A high-severity security flaw in 700 Series from Red Lion Controls. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.2%top 95.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating by using SNMP/TFTP.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Lion Controls | 700 Series | 0 – before Firmware Versions 3.11.00 – before Bootloader Versions 2.0.6.1 |
Weakness: CWE-494 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N