The vulnerability allows anyone to push or pull firmware files over SNMP/TFTP without any form of authentication or integrity verification. An attacker who discovers an N‑Tron 700 Series device on a network could replace the legitimate firmware with malicious code, resulting in full device compromise. The lack of an authentication layer means that no credentials are needed, so the potential impact is equivalent to remote code execution at the device level.

Red Lion Controls N‑Tron 700 Series devices are affected. The advisory does not specify a particular firmware version range, so all models using the affected software stack should be considered at risk until the vendor recommends a fix. No version details are available in the current data.

The CVSS score of 8.4 indicates a high severity. The EPSS score is not available, so the actual exploitation probability is unknown, but the vulnerability remains high-risk because it is remotely reachable and requires no authentication. The device is not listed in CISA’s KEV catalog, suggesting that widespread exploitation has not yet been observed. The likely attack vector is a remote attacker leveraging SNMP/TFTP to deliver malicious firmware directly to the device.