Red Lion Crimson 3.2 Build 3.2.0036.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redlion:crimson:3.2:build_3.2.0036.0:*:*:*:*:*:*
part: a version: 3.2 update: build_3.2.0036.0
| Vendor | Redlion (fd43db5a-60ba-548c-afd4-ce6799919957) |
|---|---|
| Product | Crimson (b99c1d4b-a5ee-5410-9d8f-0cc6f9650853) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5719 |
vulnerable | 2026-06-08 06:19:44.557898 |
Red Lion Crimson Improper Neutralization of Null Byte or NUL Character
HIGH (8.8)
The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent (%) character, invalid values will be included, potentially truncating the string if a NUL is encountered. If the simplified password is not detected by the administrator, the device might be left in a vulnerable state as a result of more-easily compromised credentials. Note that passwords entered via the Crimson system web server do not suffer from this vulnerability.
Published: 2023-11-06T19:33:20.369Z
Updated: 2025-01-16T21:26:43.011Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3090 |
vulnerable | 2026-06-08 05:47:19.410037 |
Details available
HIGH (7.5)
Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and prior are vulnerable to path traversal. When attempting to open a file using a specific path, the user's password hash is sent to an arbitrary host. This could allow an attacker to obtain user credential hashes.
Published: 2022-11-17T21:55:37.791Z
Updated: 2025-04-16T16:06:05.099Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.