VULNERABILITY INTELLIGENCE

CVE-2023-42770

CVSS score10 CRITICAL

EPSS probability0.88%

CISA KEVNot currently listed

Published2023-11-21

Last modified2026-06-17

Description

Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message is received over TCP/IP the RTU will simply accept the message with no authentication challenge.