Record status Published
Identifier year (not publication year) 2023
Source publication Nov 21, 2023
Source updated Feb 25, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function
When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message comes over TCP/IP the RTU will simply accept the message with no authentication challenge.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ST-IPm-8460
Vendor Red Lion Controls
Product ST-IPm-8460
Platforms Unknown
Default status unaffected
ST-IPm-8460 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
6.0.202 affectedUnavailable Unavailable Unavailable None listed
ST-IPm-6350
Vendor Red Lion Controls
Product ST-IPm-6350
Platforms Unknown
Default status unaffected
ST-IPm-6350 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
4.9.114 affectedUnavailable Unavailable Unavailable None listed
VT-mIPm-135-D
Vendor Red Lion Controls
Product VT-mIPm-135-D
Platforms Unknown
Default status unaffected
VT-mIPm-135-D · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
4.9.114 affectedUnavailable Unavailable Unavailable None listed
VT-mIPm-245-D
Vendor Red Lion Controls
Product VT-mIPm-245-D
Platforms Unknown
Default status unaffected
VT-mIPm-245-D · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
4.9.114 affectedUnavailable Unavailable Unavailable None listed
VT-IPm2m-213-D
Vendor Red Lion Controls
Product VT-IPm2m-213-D
Platforms Unknown
Default status unaffected
VT-IPm2m-213-D · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
4.9.114 affectedUnavailable Unavailable Unavailable None listed
VT-IPm2m-113-D
Vendor Red Lion Controls
Product VT-IPm2m-113-D
Platforms Unknown
Default status unaffected
VT-IPm2m-113-D · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
4.9.114 affectedUnavailable Unavailable Unavailable None listed