VYPR
← All advisories
High severity8.8NVD Advisory· Published Nov 6, 2023· Updated Jun 17, 2026

CVE-2023-5719

CVE-2023-5719

Description

The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent (%) character, invalid values will be included, potentially truncating the string if a NUL is encountered. If the simplified password is not detected by the administrator, the device might be left in a vulnerable state as a result of more-easily compromised credentials. Note that passwords entered via the Crimson system web server do not suffer from this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

24
  • Redlion/Crimson22 versions
    cpe:2.3:a:redlion:crimson:*:*:*:*:*:*:*:*+ 21 more
    • cpe:2.3:a:redlion:crimson:*:*:*:*:*:*:*:*range: <3.2
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0008.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0014.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0015.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0016.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0020.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0021.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0025.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0026.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0030.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0031.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0035.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0036.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0040.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0041.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0044.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0047.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0050.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0051.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0053.0:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0053.18:*:*:*:*:*:*
    • cpe:2.3:a:redlion:crimson:3.2:build_3.2.0053.1:*:*:*:*:*:*
  • Red Lion Controls/Crimson 3.2llm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.