[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-red-lion-switches-shipped-with-hardcoded-admin-password":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},10756,"red-lion-switches-shipped-with-hardcoded-admin-password","Red Lion Switches Shipped With Hardcoded Admin Password","Seven flaws in Red Lion's N-Tron 700 Series industrial switches include a factory password that survives even after admins think they've locked it down.","A new federal security advisory has flagged seven vulnerabilities in Red Lion Controls' N-Tron 700 Series industrial switches, and the headline flaw is a hardcoded admin password that survives even after an administrator sets up a new account.\n\nThe advisory, published October 8, covers firmware up to version 3.11.0 and bootloader up to version 2.0.6.1. Beyond the persistent factory credential, the switches store usernames and passwords in plaintext inside configuration files, and those files can be pulled off the device through an unauthenticated SNMP-triggered TFTP transfer. Other stored credentials use weak encryption, and a missing-authentication bug lets an attacker reboot the switch just by hitting a specific URL, something that can be scripted into a loop for a denial-of-service attack. The combined flaws earn a CVSS v3.1 score of 8.3, and vendor HMS Networks has shipped firmware 3.11.1 as the fix.\n\nN-Tron switches sit inside commercial facilities, communications networks, critical manufacturing plants, and IT infrastructure worldwide, the kind of unglamorous gear nobody audits until it becomes the way in. A password that persists through account changes isn't really a bug so much as a design assumption that never accounted for an attacker reading the manual.\n\nIndustrial switch vendors keep shipping hardcoded credentials as if Stuxnet never happened; patching them, unlike patching a laptop, means someone has to physically walk onto a factory floor.","[\"ics-security\",\"hardcoded-credentials\",\"red-lion-controls\",\"vulnerability-disclosure\"]","2026-10-08T12:00:00.000Z","2026-10-09T10:37:43.303Z","2026-10-09T10:37:47.249Z","published",null,[],"security",[26,27,28,29],"ics-security","hardcoded-credentials","red-lion-controls","vulnerability-disclosure",[31],{"name":32,"url":33},"CISA Advisories","https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-26-281-01",0,{"sections":36},[37,42,46,51,56,61,66,71,76,81,86,91,96,101],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",6532,"2026-10-08T18:19:45.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":45},"Security",922,"2026-10-08T16:05:00.000Z",{"name":47,"slug":48,"count":49,"latest_published_at":50},"Policy","policy",478,"2026-10-08T15:24:40.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",471,"2026-10-08T18:48:11.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Hardware","hardware",227,"2026-10-08T18:23:28.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Science","science",188,"2026-10-08T15:28:36.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Consumer Tech","consumer-tech",180,"2026-10-08T18:21:59.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Startups","startups",117,"2026-10-08T16:45:00.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Software","software",114,"2026-10-08T17:57:01.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Dev Tools","dev-tools",105,"2026-10-07T16:59:11.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"General","general",64,"2026-10-08T18:36:05.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"Gaming","gaming",57,"2026-10-08T15:18:41.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"Reviews","reviews",34,"2026-10-08T14:00:22.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]