CVE-2020-25191

2020-12-1101:46:58

CWE-732

icscert

www.cve.org

0.001 Low

EPSS

Percentile

41.4%

JSON

Incorrect permissions are set by default for an API entry-point of a specific service, allowing a non-authenticated user to trigger a function that could reboot the CompactRIO (Driver versions prior to 20.5) remotely.

CNA Affected

[
  {
    "product": "CompactRIO",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Driver versions prior to 20.5"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-20-338-01

0.001 Low

EPSS

Percentile

41.4%

JSON

Related for CVELIST:CVE-2020-25191