The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent (%) character, invalid values will be included, potentially truncating the string if a NUL is encountered. If the simplified password is not detected by the administrator, the device might be left in a vulnerable state as a result of more-easily compromised credentials. Note that passwords entered via the Crimson system web server do not suffer from this vulnerability.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HRedlion Crimson
APPRedlion3.2< 3.2Redlion Da50a
HWRedlionwszystkie wersjeRedlion Da70a
HWRedlionwszystkie wersje
Powiązane podatności
The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read a...
Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson...
A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a...
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vuln...
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vuln...