https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T07:53:23.243545+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-42770 CVE-2023-42770 — Red Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel 2026-10-09T07:53:23.264252+00:00

Affected: Red Lion Controls ST-IPm-8460, Red Lion Controls ST-IPm-6350, Red Lion Controls VT-mIPm-135-D, Red Lion Controls VT-mIPm-245-D, Red Lion Controls VT-IPm2m-213-D, Red Lion Controls VT-IPm2m-113-D

Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message is received over TCP/IP the RTU will simply accept the message with no authentication challenge.

 https://cve.radiocsirt.org/vuln/icsa-23-320-01 ICSA-23-320-01 — Red Lion Sixnet RTUs 2026-10-09T07:53:23.264360+00:00

Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message is received over TCP/IP the RTU will simply accept the message with no authentication challenge. When user authentication is not enabled the shell can be executed commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message comes over TCP/IP the RTU will simply accept the message with no authentication challenge.