Red Lion Controls N-Tron 700 Series
Multiple critical vulnerabilities found in Red Lion Controls N-Tron 700 Series industrial switches.
Red Lion Controls N-Tron 700 Series industrial switches are affected by multiple critical vulnerabilities. These flaws allow for unauthorized administrative access, viewing and editing of configuration files, and can be exploited to cause continuous reboots of the device. The vulnerabilities stem from issues like hard-coded credentials, insecure storage of credentials, and missing authentication for critical functions.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Red Lion Controls?
Get an email when a new story names Red Lion Controls, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonRed Lion Controls N-Tron 700 Series industrial switches contain critical design-level flaws including hard-coded credentials, insecure credential storage, and missing authentication for critical functions — a combination that grants attackers administrative access without any prior knowledge of the environment. These are not merely unpatched bugs but fundamental security failures baked into the product, making them especially dangerous in operational technology (OT) environments where uptime is critical. An attacker exploiting these vulnerabilities could alter configurations, view sensitive network data, or trigger continuous device reboots, potentially disrupting industrial processes. This case underscores the systemic risk of deploying legacy or insufficiently vetted industrial devices in critical infrastructure without compensating security controls.
What helps against this
How we list vendors- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Automated patch management
Known holes get closed in days, not months.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-32645
- cve — CVE-2026-39460
- cve — CVE-2026-28745
- cve — CVE-2026-33367
- cve — CVE-2026-29797
- cve — CVE-2026-39453
- cve — CVE-2026-33272