CVE-2026-33367

{
  "etk_id": "ETK-2026-1105",
  "cve_id": "CVE-2026-33367",
  "display_id": "CVE-2026-33367",
  "ghsa_id": "GHSA-66jm-5jv9-hhhv",
  "euvd_id": "EUVD-2026-95812",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated SNMP administration in Red Lion Controls 700 Series",
  "summary": "Red Lion Controls 700 Series devices are affected by missing authentication for administrative SNMP functions. An attacker who can reach the SNMP service may retrieve configuration data, alter accounts or settings, or initiate firmware and bootloader changes.",
  "mitigation": "Upgrade Series to Firmware Versions 3.11.0, Bootloader Versions 2.0.6.1 or later.",
  "vendor": "Red Lion Controls",
  "product": "700 Series",
  "affected": [
    {
      "affected_notes": [
        ">= 0, < Firmware Versions 3.11.0",
        ">= 0, < Bootloader Versions 2.0.6.1"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [
        "Firmware Versions 3.11.0",
        "Bootloader Versions 2.0.6.1"
      ],
      "package_name": "700 Series",
      "purl": null
    }
  ],
  "cwes": [
    306
  ],
  "cvss_score": 9.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N",
  "epss_score": 0.0029,
  "epss_percentile": 0.2024,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 21.706014083333333,
  "t0_at": "2026-10-09T14:38:37.795000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-09T14:38:37.795000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-09T14:38:37.795000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33367"
    }
  }
}