The vulnerability is a missing authentication mechanism in the SNMP interface of the N‑Tron 700 Series, allowing an attacker to perform administrative actions—including retrieving configuration files, modifying user accounts, and upgrading or downgrading firmware—without credentials. This absence of authentication means an unauthenticated network attacker can effectively execute arbitrary code or manipulate the device’s behavior, potentially leading to full system compromise.

Red Lion Controls N‑Tron 700 Series devices that have not been upgraded to firmware version 3.11.1 or greater are affected. The advisory does not list specific sub‑models, so all units in the 700 Series are presumed vulnerable until the firmware update is applied.

The CVSS score of 9.3 classifies this flaw as Critical, and the lack of authentication makes it trivial for a network‑enabled attacker to exploit the SNMP service. No EPSS data is available, and the flaw is not listed in the CISA KEV catalog, but the potential for remote code execution and the broad exposure across the 700 Series warrant immediate attention. The likely attack vector is a remote SNMP request sent over the network, requiring only network connectivity to the device.