[Control systems] Red Lion Controls security advisory (AV22-646)

Number: AV22-646
Date: 17 November 2022

On 17 November 2022, ICS-CERT published an ICS Advisory to highlight a vulnerability in the following products:

• Crimson 3.0 – version 707.000 and prior
• Crimson 3.1 – version 001 and prior
• Crimson 3.2 – version2.0044.0 and prior

Exploitation of this vulnerability could lead to credential disclosure.

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary update.

• ICS Advisory (ICSA-22-321-01)