Design/Logic Flaw

2020-12-1102:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

41.4%

JSON

Incorrect permissions are set by default for an API entry-point of a specific service, allowing a non-authenticated user to trigger a function that could reboot the CompactRIO (Driver versions prior to 20.5) remotely.

CPENameOperatorVersion
compactrio_firmwarelt20.5

CPE	Name	Operator	Version
	compactrio_firmware	lt	20.5

References

us-cert.cisa.gov/ics/advisories/icsa-20-338-01

0.001 Low

EPSS

Percentile

41.4%

JSON

Related for PRION:CVE-2020-25191