1. Home
  2. CVE Database
  3. CVE-2016-9335
CRITICAL · 10.0

CVE-2016-9335

A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and Stride-Managed Ethernet Switches running firmwa...

Vulnerability Description

A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and Stride-Managed Ethernet Switches running firmware Version 5.0.190. Vulnerable versions of Stride-Managed Ethernet switches and Sixnet-Managed Industrial switches use hard-coded HTTP SSL/SSH keys for secure communication. Because these keys cannot be regenerated by users, all products use the same key. The attacker could disrupt communication or compromise the system. CVSS v3 base score: 10, CVSS vector string: (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). Red Lion Controls recommends updating to SLX firmware Version 5.3.174.

CVSS Score

10.0

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
RedlionSixnet-Managed Industrial Switches Firmware<= 5.0.196
RedlionSixnet-Managed Industrial Switches-
RedlionStride-Managed Ethernet Switches Firmware<= 5.0.190
RedlionStride-Managed Ethernet Switches-

Related Weaknesses (CWE)

CWE-321CWE-798

References

FAQ

What is CVE-2016-9335?

CVE-2016-9335 is a vulnerability with a CVSS score of 10.0 (CRITICAL). A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and Stride-Managed Ethernet Switches running firmwa...

How severe is CVE-2016-9335?

CVE-2016-9335 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2016-9335?

Check the references section above for vendor advisories and patch information. Affected products include: Redlion Sixnet-Managed Industrial Switches Firmware, Redlion Sixnet-Managed Industrial Switches, Redlion Stride-Managed Ethernet Switches Firmware, Redlion Stride-Managed Ethernet Switches.