Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control

Summary: Claroty Team 82 disclosed two CVSS 10.0 flaws, CVE-2023-40151 and CVE-2023-42770, in Red Lion SixTRAK and VersaTRAK RTUs that let an unauthenticated attacker execute commands with root privileges. Red Lion's June 2025 advisory states that with authenticated users enabled (UDR-A), any Sixnet UDR message received over TCP/IP is accepted with no authentication challenge, and the two flaws can be chained to bypass authentication and achieve remote code execution.
What you should know: These RTUs run automation across energy, water and wastewater, transportation, utilities, and manufacturing, so root-level command execution on them opens the door to process disruption or damage. CISA flagged the flaws in November 2023, yet Red Lion's advisory on the authentication bypass arrived in June 2025 - a gap worth measuring against your own patch and TCP-exposure posture on these devices.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-40151 CVE-2023-42770
Related: ⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, Ether Hiding & More Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026