Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:red_lion_controls_crimson_(windows_configuration_software):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductRed Lion Controls Crimson (Windows Configuration Software) (0a2b7155-c9b5-522f-bf3b-a3f8c0e37abe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10996 vulnerable 2026-06-08 05:12:26.156828 Details available
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that can reference memory after it has been freed.
Published: 2019-09-23T15:58:11.000Z
Updated: 2026-06-02T20:08:06.881Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10990 vulnerable 2026-06-08 05:12:26.137536 Details available
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may allow an attacker to access configuration files.
Published: 2019-09-23T15:46:43.000Z
Updated: 2026-06-02T20:07:19.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10984 vulnerable 2026-06-08 05:12:26.132736 Details available
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that causes the program to mishandle pointers.
Published: 2019-09-23T15:58:41.000Z
Updated: 2026-06-02T20:06:06.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10978 vulnerable 2026-06-08 05:12:26.120329 Details available
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that operates outside of the designated memory area.
Published: 2019-09-23T15:58:32.000Z
Updated: 2026-06-02T20:02:21.675Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.