Red Lion Controls N-Tron 700 Series

What happened

If the default credentials are known by a malicious user, they could obtain other credentials on the system. This access would allow the user to view, edit, and upload configuration files.

Further, a malicious user can cause the switch to reboot by navigating to a specific URL on the device. This action can be scripted on the malicious user's local machine to cause continuous rebooting of the switch.

With administrator rights, the configuration file can be viewed through the CLI (a text interface where commands are typed rather than clicked) or they can be exported from the device through a TFTP transfer from the web interface. A TFTP transfer can be initiated through SNMP which does not require authentication.