The vulnerability lies in hard‑coded factory credentials that remain enabled for the N‑Tron 700 Series even after new administrator accounts are configured. Because these credentials provide full administrative rights, an attacker who can reach the device’s network can gain privileged access without needing any additional credentials. This extends to potential execution of arbitrary commands, configuration changes, and any data that can be read or altered by an admin user.

Red Lion Controls N‑Tron 700 Series units running firmware versions older than 3.11.1 are affected. The advisory recommends upgrading to firmware 3.11.1 or later, disabling the SNMP communities, or disabling the web GUI to mitigate the issue.

The CVSS score is 9.2, indicating a high severity vulnerability. The EPSS score is not available, so the likelihood of exploitation cannot be quantified but the attack vector is likely network‑based, inferred from the nature of the credentials. The vulnerability is not listed in CISA KEV, but the high CVSS and presence of enduring factory credentials make it attractive for attackers with network access.