CVE-2026-28745

HIGH 7.5

Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format

CVSS Score

7.5

EPSS Score

0.0%

EPSS Percentile

0th

Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.

CWE	CWE-257
Vendor	red lion controls
Product	700 series
Published	Oct 9, 2026

Stay Ahead of the Next One

Get instant alerts for red lion controls 700 series

Be the first to know when new high vulnerabilities affecting red lion controls 700 series are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

Red Lion Controls / 700 Series

0 < Firmware Versions 3.11.0 0 < Bootloader Versions 2.0.6.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

hms-networks.com: https://www.hms-networks.com/ hms-networks.com: https://www.hms-networks.com/cybersecurity cisa.gov: https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01 github.com: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json

Credits

Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA.