PT-2022-20368 · Red Lion Controls · Crimson 3.0+2

Published 2022-11-17 · Updated 2022-11-22 · CVE-2022-3090

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Lion Controls Crimson 3.0 versions 707.000 and prior Red Lion Controls Crimson 3.1 versions 3126.001 and prior Red Lion Controls Crimson 3.2 versions 3.2.0044.0 and prior

Description The issue allows an attacker to obtain user credential hashes through path traversal. When a user attempts to open a file using a specific path, the user's password hash is sent to an arbitrary host. This could enable an attacker to obtain user credential hashes.

Recommendations For Red Lion Controls Crimson 3.0 versions 707.000 and prior, update to a version later than 707.000 to resolve the issue. For Red Lion Controls Crimson 3.1 versions 3126.001 and prior, update to a version later than 3126.001 to resolve the issue. For Red Lion Controls Crimson 3.2 versions 3.2.0044.0 and prior, update to a version later than 3.2.0044.0 to resolve the issue. As a temporary workaround, consider restricting file access to prevent the sending of password hashes to arbitrary hosts.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-3090

Affected Products

Crimson 3.0

Crimson 3.1

Crimson 3.2

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-3090 · Security Note
• https://osv.dev/vulnerability/CVE-2022-3090 · Vendor Advisory
• https://t.me/cvenotify/38264 · Telegram Post
• https://t.me/cibsecurity/53111 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-22-321-01 · Note