+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control (/showthread.php?tid=6312031)
Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control - Stanley - Oct 24, 2025
Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control
Cybersecurity researchers have disclosed two critical security flaws impacting Red Lion Sixnet remote terminal unit (RTU) products that, if successfully exploited, could result in code execution with the highest privileges.
The shortcomings, tracked as CVE-2023-40151 and CVE-2023-42770, are both rated 10.0 on the CVSS scoring system.
"The vulnerabilities affect Red Lion SixTRAK and VersaTRAK
https://thehackernews.com/2025/10/two-cvss-100-bugs-in-red-lion-rtus.html
RE: Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control - Hackers - Oct 24, 2025
these may feel super obscure, but this affects energy infrastructure so the targets are extremely high value.
RE: Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control - Chorozon - Oct 25, 2025
This is the exploits worth the big big $$$
CISA did the alert but who found it ....?
RE: Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control - Hackers - Oct 25, 2025
(Oct 25, 2025 06:11 AM)Chorozon Wrote: This is the exploits worth the big big $$$
CISA did the alert but who found it ....?
not sure about original, but found a POC:
https://github.com/s3cb0y/CVE-2023-43770-POC
RE: Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control - Chorozon - Oct 25, 2025
(Oct 25, 2025 07:31 AM)anenlilki Wrote: not sure about original, but found a POC:
https://github.com/s3cb0y/CVE-2023-43770-POC
Oooh this is dangerous and in python no less , good work to s3cb0y
thanks for linking the POC
RE: Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control - Hackers - Oct 25, 2025
(Oct 25, 2025 07:33 AM)Chorozon Wrote: Oooh this is dangerous and in python no less , good work to s3cb0y
thanks for linking the POC
np, just sharing for research purposes so people can check if their own servers are secure or not.
RE: Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control - Chorozon - Oct 25, 2025
(Oct 25, 2025 07:39 AM)anenlilki Wrote: np, just sharing for research purposes so people can check if their own servers are secure or not.
yes yes... none here will use it to try and compromise government architecture....
RE: Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control - Hackers - Oct 25, 2025
(Oct 25, 2025 07:40 AM)Chorozon Wrote: yes yes... none here will use it to try and compromise government architecture....
I hope not, that would be highly illegal
RE: Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control - Chorozon - Oct 25, 2025
(Oct 25, 2025 07:41 AM)anenlilki Wrote: I hope not, that would be highly illegal
Unless your a government asset and targeting a different government , then your a valued member of society ðŸ¤ðŸ¤
RE: Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control - leste - Oct 29, 2025
Anyone using SixTRAK and VersaTRAK RTUs needs to patch these immediately.
RE: Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control - B3A - Oct 30, 2025
Equipment that controls the real world getting hacked through a backdoor? Sounds scary