Passwords and usernames, including the default login information, are stored in configuration files using weak encryption. An attacker who knows the default credentials can read these files to recover other system credentials, allowing unauthorized access to the device and potentially the broader network.

Red Lion Controls N‑Tron 700 Series devices are affected. All firmware versions prior to 3.11.1 store credentials in a recoverable format and lack adequate protection for SNMP communities and web GUI access.

The CVSS score of 9.3 indicates critical severity. No EPSS score is available, but the lack of encryption means that if default credentials are known, credential recovery is trivial. The vulnerability is not listed in CISA’s KEV catalog, yet the high severity and potential for wide compromise warrant urgent attention. The most likely attack path is from an initial compromise using known default credentials or weakly protected SNMP communities, followed by credential extraction and lateral movement.