CVE-2023-42770 — Red Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel
Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same mess…
Published: 2023-11-21 · CVSS: 10.0 · CVSS 3.1
Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message is received over TCP/IP the RTU will simply accept the message with no authentication challenge.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7