Our takeCISA reports that the N-Tron 700 Series switches have exploitable flaws letting attackers gain admin access, view/edit/upload configs, and force reboots. Update to the fixed firmware if you run these OT switches.Cyber Resilience desk
Sources (2)
- cisa_advisories · cisa_advisories
- cisa_ics · cisa_ics
What this means for you — Security leader:CISA reports these vulnerabilities are being exploited in the wild. Update N-Tron 700 Series switches to the patched firmware immediately and restrict administrative access to trusted networks only.
What this means for you — Lean IT orgs:If you use a Red Lion N-Tron 700 Series switch, apply the vendor update right away. Until then, limit who can reach the device and watch for unexpected reboots.
What this means for you — MSP:Check client environments for any Red Lion N-Tron 700 Series switches and deploy the CISA-noted firmware update on your normal patch cycle. Block external administrative access where possible.
What this means for you — Researcher:CISA advisory ICSA-26-281-01 details multiple vulnerabilities in Red Lion Controls N-Tron 700 Series switches that are under active exploitation. Successful attack grants administrative access, configuration manipulation, and forced reboots.