Default admin credentials that persist and SNMP actions that need no login could let attackers take over N-Tron 700 switches, CISA says. Red Lion’s fix is firmware 3.11.1. CISA has no reports of public exploitation.
CISA’s advisory covers N-Tron 700 firmware 3.11.0 and earlier and bootloader 2.0.6.1 and earlier, across seven CVEs. The most serious issues are login-free SNMP/TFTP firmware pushes and default admin credentials that persist. One flaw needs physical access. CISA gives a headline CVSS v3 score of 8.3; individual CVSS v4 scores range from 6.8 to 9.3. Red Lion’s fix is firmware 3.11.1. Until it is applied, CISA advises configuring or disabling SNMP communities and disabling the web interface. CISA says no public exploitation targeting these flaws has been reported, and they are not in its Known Exploited Vulnerabilities catalogue.
Sources: CISA ICSA-26-281-01