BaseFortify

Executive Summary

This vulnerability allows a malicious user with physical access to a Red Lion Controls 700 Series switch to reset it to factory settings without authentication. They can then use default admin credentials to gain administrative access and make persistent changes to the configuration file.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires checking for unauthorized changes to the switch configuration or unexpected factory resets. Inspect the device logs for signs of physical access or configuration modifications. Verify the current configuration against known good backups to identify unauthorized changes.

Useful 0 Not Useful 0

Impact Analysis

An attacker could gain full administrative control over the switch, alter network configurations, intercept traffic, or disrupt operations. This could lead to unauthorized access, data breaches, or denial of service.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating confidentiality requirements in GDPR and HIPAA. Non-compliance may result in legal penalties, fines, or reputational damage.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately restrict physical access to the device to prevent unauthorized booting. Change the default administrative credentials to strong, unique passwords. Enable logging and monitor for factory reset events or configuration changes. Update the device firmware if patches are available.

Useful 0 Not Useful 0