---
id: CVE-2026-33272
title: >-
  A malicious user with physical access to the device can boot the switch from
  factory settings without authentication, use the default administrative
  credentials to obtain administrative access, and save changes to the
  configuration file …
summary: >-
  A malicious user with physical access to the device can boot the switch from
  factory settings without authentication, use the default administrative
  credentials to obtain administrative access, and save changes to the
  configuration file …
severity: medium
cvss: 4.9
cvssVector: 'CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N'
cwe:
  - CWE-288
published: '2026-10-09'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T17:17:04.610'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-33272'
references:
  - url: >-
      https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json
    label: ics-cert@hq.dhs.gov
  - url: 'https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01'
    label: ics-cert@hq.dhs.gov
  - url: 'https://www.hms-networks.com/'
    label: ics-cert@hq.dhs.gov
  - url: 'https://www.hms-networks.com/cybersecurity'
    label: ics-cert@hq.dhs.gov
tags:
  - nvd
  - cve.org
epss: 0.0015
epssPercentile: 0.04147
ingestedAt: '2026-10-09T16:02:33.388Z'
vendor: Red Lion Controls
product: 700 Series
affected:
  - 700_series < Firmware Versions 3.11.0
  - 700_series < Bootloader Versions 2.0.6.1
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-11T16:49:14.728539Z'
---

## Overview

A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administrative access, and save changes to the configuration file so that they persist next time the switch boots normally.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.