What’s Vulnerable › Vulnerabilities

CVE-2026-33272: Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or Channel

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-09 · updated 2026-10-11
• Weakness: CWE-288

Description

A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.

Affected products

• Red Lion Controls 700 Series: before Firmware Versions 3.11.0; before Bootloader Versions 2.0.6.1 — fixed in Bootloader Versions 2.0.6.1, Firmware Versions 3.11.0

How to fix

Upgrade to a fixed version: Red Lion Controls 700 Series Bootloader Versions 2.0.6.1, Firmware Versions 3.11.0. Check the vendor advisory for mitigations.

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01
• https://www.hms-networks.com/
• https://www.hms-networks.com/cybersecurity

Get alerted when CVE-2026-33272 or the next vulnerability affects your stack