Is CVE-2026-33272 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-33272 being exploited in the wild.

How severe is CVE-2026-33272?

Medium severity, with a CVSS score of 4.9, published 9 October 2026.

Which products and versions are affected?

Red Lion Controls N-Tron 700 Series <= Firmware 3.11.0, <= Bootloader 2.0.6.1.

How is CVE-2026-33272 attacked?

It is attacked with physical access, in a network appliance.

Am I affected by CVE-2026-33272?

Check whether you run Red Lion Controls N-Tron 700 Series at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-33272: Red Lion Controls N-Tron 700 Series physical reset to factory settings

Q: Is there a fix for CVE-2026-33272?

Yes: fixed in N-Tron 700 Series Firmware 3.11.1 or greater. Until then: Disable access to the web GUI and configure or disable SNMP communities to reduce the attack surface after factory reset. Physically restrict access to the device console and reset mechanisms in secure locations. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-33272 attacked?

It is attacked with physical access, in a network appliance.

Q: Am I affected by CVE-2026-33272?

Check whether you run Red Lion Controls N-Tron 700 Series at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-33272 · Severity: medium · CVSS 4.9 · Published 2026-10-09

The Red Lion Controls N-Tron 700 Series is a managed industrial Ethernet switch used in critical infrastructure. An attacker with physical access can reset the device to factory defaults and use default credentials to gain administrative control, allowing them to modify network configurations and cause service disruptions.

Technologies: Red Lion Controls N-Tron 700 Series. Vendors: Red Lion Controls.

Quick answers

Is CVE-2026-33272 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-33272 being exploited in the wild.
How severe is CVE-2026-33272?: Medium severity, with a CVSS score of 4.9, published 9 October 2026.
Which products and versions are affected?: Red Lion Controls N-Tron 700 Series <= Firmware 3.11.0, <= Bootloader 2.0.6.1.
Is there a fix for CVE-2026-33272?: Yes: fixed in N-Tron 700 Series Firmware 3.11.1 or greater. Until then: Disable access to the web GUI and configure or disable SNMP communities to reduce the attack surface after factory reset. Physically restrict access to the device console and reset mechanisms in secure locations. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-33272 attacked?: It is attacked with physical access, in a network appliance.
Am I affected by CVE-2026-33272?: Check whether you run Red Lion Controls N-Tron 700 Series at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: N-Tron 700 Series Firmware 3.11.1 or greater

Disable access to the web GUI and configure or disable SNMP communities to reduce the attack surface after factory reset. Physically restrict access to the device console and reset mechanisms in secure locations.

Technical details

A malicious user with physical access can boot the N-Tron 700 Series from factory settings without authentication, then use well-known default administrative credentials to obtain full administrative access. Once authenticated, the attacker can view, edit, and persist changes to the configuration file across reboots, compromising the integrity and availability of the industrial network segment.

Affected products

Red Lion Controls N-Tron 700 Series <= Firmware 3.11.0, <= Bootloader 2.0.6.1

Timeline

2026-10-09: disclosed
2026-10-15: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.