CVE-2026-28745— Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format
Quick assessment
Affected
Red Lion Controls 700 Series
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
用户名和密码（包括默认凭据）以弱加密的方式存储在配置文件中。如果恶意用户知晓了默认凭据，他们可能能够获取系统中其他用户的凭据。
Possible ATT&CK Techniques 2 AI
T1528 · Steal Application Access Token T1552 · Unsecured Credentials
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-28745
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format
Source: CVE Program / CVE List V5
Vulnerability Description
Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
以可恢复格式存储口令
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Lion Controls | 700 Series | 0 ~ Firmware Versions 3.11.0 | - |
|
II. Public POCs for CVE-2026-28745
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-28745
请登录查看更多情报信息。
Other References for CVE-2026-28745 (4)
Same Patch Batch · Red Lion Controls · 2026-10-09 · 7 CVEs total
| CVE-2026-39453 | 8.3 HIGH | Red Lion Controls N-Tron 700 Series Reachable Assertion |
| CVE-2026-39460 | 8.1 HIGH | Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials |
| CVE-2026-33367 | 8.1 HIGH | Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function |
| CVE-2026-29797 | 7.1 HIGH | Red Lion Controls N-Tron 700 Series Download of Code Without Integrity Check |
| CVE-2026-32645 | 6.0 MEDIUM | Red Lion Controls N-Tron 700 Series Use of Hard-Coded Credentials |
| CVE-2026-33272 | 4.9 MEDIUM | Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or Chann |
IV. Related Vulnerabilities
Same product: 700 Series
-
CVE-2026-33272
Red Lion Controls N-Tron 700 Series Authentication Bypass Us -
CVE-2026-39453
Red Lion Controls N-Tron 700 Series Reachable Assertion -
CVE-2026-29797
Red Lion Controls N-Tron 700 Series Download of Code Without -
CVE-2026-33367
Red Lion Controls N-Tron 700 Series Missing Authentication f -
CVE-2026-39460
Red Lion Controls N-Tron 700 Series Insufficiently Protected
Same vendor: Red Lion Controls
-
CVE-2026-33272
Red Lion Controls N-Tron 700 Series Authentication Bypass Us -
CVE-2026-39453
Red Lion Controls N-Tron 700 Series Reachable Assertion -
CVE-2026-29797
Red Lion Controls N-Tron 700 Series Download of Code Without -
CVE-2026-33367
Red Lion Controls N-Tron 700 Series Missing Authentication f -
CVE-2026-39460
Red Lion Controls N-Tron 700 Series Insufficiently Protected
Same weakness: CWE-257
V. Comments for CVE-2026-28745
No comments yet