Search Results (7 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-27285 1 Redlion 1 Crimson 2026-06-02 6.5 Medium
The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without authentication.
CVE-2020-27283 1 Redlion 1 Crimson 2026-06-02 5.3 Medium
An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locations.
CVE-2020-27279 1 Redlion 1 Crimson 2026-06-02 7.5 High
A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson 3.1 (Build versions prior to 3119.001).
CVE-2019-10996 1 Redlion 1 Crimson 2026-06-02 7.8 High
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that can reference memory after it has been freed.
CVE-2019-10990 1 Redlion 1 Crimson 2026-06-02 6.5 Medium
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may allow an attacker to access configuration files.
CVE-2019-10984 1 Redlion 1 Crimson 2026-06-02 7.8 High
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that causes the program to mishandle pointers.
CVE-2019-10978 1 Redlion 1 Crimson 2026-06-02 3.3 Low
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that operates outside of the designated memory area.