CVE-2025-41656

An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the NodeRED server is not configured by default...

CVE-2025-41656

creationtimestamp| type| source ---|---|--- 2025-07-01 08:11:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/114776965933433914 2025-07-01 08:12:01+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lsvatcmlef52 2025-07-01 08:55:34+00:00| seen|...

CVE-2025-41656 Pilz: Missing Authentication in Node-RED integration

An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the NodeRED server is not configured by default...

CVE-2025-41656

CVE-2025-41656 concerns the Pilz IndustrialPI Node-RED integration, where the authentication for the Node-RED server is not configured by default. This allows an unauthenticated remote attacker to execute arbitrary commands with high privileges on affected devices. The CVSS 3.1 base score is 10.0...

CVE-2025-41656 Pilz: Missing Authentication in Node-RED integration

An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the NodeRED server is not configured by default...