SNMP Vulnerability in HMS Networks Products
CVE-2026-33367

9.3CRITICAL

Key Information:

Vendor

Red Lion Controls

Status
700 Series
Vendor
CVE Published:
9 October 2026

What is CVE-2026-33367?

A significant vulnerability exists within multiple products from HMS Networks due to improper SNMP configuration. This flaw allows attackers to execute administrative tasks without authentication, including retrieving sensitive configuration files, altering user accounts, and modifying device settings. It further permits potentially harmful firmware and bootloader upgrades or downgrades, presenting a serious risk to system integrity and security. Immediate action is recommended to mitigate potential exploitation.

Affected Version(s)

700 Series 0

700 Series 0

700 Series 3.11.1

References

https://www.hms-networks.com/
https://www.hms-networks.com/cybersecurity
https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gabrianna (Ria) Milloway of Idaho National Laboratory reported this vulnerability to CISA.
.