[Stanley]

Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control

Cybersecurity researchers have disclosed two critical security flaws impacting Red Lion Sixnet remote terminal unit (RTU) products that, if successfully exploited, could result in code execution with the highest privileges.
The shortcomings, tracked as CVE-2023-40151 and CVE-2023-42770, are both rated 10.0 on the CVSS scoring system.
"The vulnerabilities affect Red Lion SixTRAK and VersaTRAK

https://thehackernews.com/2025/10/two-cv...-rtus.html

[Hackers]

these may feel super obscure, but this affects energy infrastructure so the targets are extremely high value.

[Chorozon]

This is the exploits worth the big big $$$
CISA did the alert but who found it ....?

[Hackers]

This is the exploits worth the big big $$$
CISA did the alert but who found it ....?

not sure about original, but found a POC:
https://github.com/s3cb0y/CVE-2023-43770-POC

[Chorozon]

not sure about original, but found a POC:
https://github.com/s3cb0y/CVE-2023-43770-POC

Oooh this is dangerous and in python no less , good work to s3cb0y

thanks for linking the POC

[Hackers]

Oooh this is dangerous and in python no less , good work to s3cb0y

thanks for linking the POC

np, just sharing for research purposes so people can check if their own servers are secure or not.

[Chorozon]

np, just sharing for research purposes so people can check if their own servers are secure or not.

yes yes... none here will use it to try and compromise government architecture....

[Hackers]

yes yes... none here will use it to try and compromise government architecture....

I hope not, that would be highly illegal

[Chorozon]

I hope not, that would be highly illegal

Unless your a government asset and targeting a different government , then your a valued member of society 🤭🤭

[leste]

Anyone using SixTRAK and VersaTRAK RTUs needs to patch these immediately.

[B3A]

Equipment that controls the real world getting hacked through a backdoor? Sounds scary