Lucene search
K

8 matches found

CNNVD
CNNVD
added 2025/07/01 12:0 a.m.4 views

Pilz IndustrialPI 访问控制错误漏洞

Pilz IndustrialPI is a gateway for the Industrial Internet of Things from Pilz Individual Developers in Germany. An access control error vulnerability exists in Pilz IndustrialPI that stems from the default unconfigured NodeRED server authentication leading to command execution...

10CVSS7.2AI score0.00538EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/03 7:12 p.m.16 views

CVE-2025-24522

KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an unauthenticated remote attacker full access to the Node-RED server where they can run arbitrary commands on the underlying operating system...

10CVSS8AI score0.00297EPSS
Exploits0References1
NVD
NVD
added 2025/05/01 7:15 p.m.11 views

CVE-2025-24522

KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an unauthenticated remote attacker full access to the Node-RED server where they can run arbitrary commands on the underlying operating system...

10CVSS0.00297EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/05/01 6:37 p.m.15 views

CVE-2025-24522 KUNBUS Revolution Pi Authentication Bypass by Primary Weakness

KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an unauthenticated remote attacker full access to the Node-RED server where they can run arbitrary commands on the underlying operating system...

10CVSS9.8AI score0.00297EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/05/01 6:37 p.m.22 views

CVE-2025-24522 KUNBUS Revolution Pi Authentication Bypass by Primary Weakness

KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an unauthenticated remote attacker full access to the Node-RED server where they can run arbitrary commands on the underlying operating system...

10CVSS0.00297EPSS
Exploits0References2
CVE
CVE
added 2025/05/01 6:37 p.m.57 views

CVE-2025-24522

CVE-2025-24522 affects KUNBUS Revolution Pi OS Bookworm 01/2025 where Node-RED authentication is not configured by default. An unauthenticated remote attacker can gain full access to the Node-RED server and execute arbitrary OS commands (impacting PLC control). Connected sources describe the root...

10CVSS9.9AI score0.00297EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/05/01 12:0 a.m.1 views

KUNBUS Revolution Pi OS Bookworm 安全漏洞

KUNBUS Revolution Pi OS Bookworm is an industrial-grade real-time operating system based on Debian Bookworm from KUNBUS. A security vulnerability exists in KUNBUS Revolution Pi OS Bookworm 01/2025 that stems from the Node-RED server not being configured for authentication by default, which could...

10CVSS9.4AI score0.00297EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/05/01 12:0 a.m.1 views

PT-2025-18691 · Kunbus +1 · Kunbus Revolution Pi Os +1

Name of the Vulnerable Software and Affected Versions: KUNBUS Revolution Pi OS Bookworm 01/2025 Description: The issue arises because authentication is not configured by default for the Node-RED server. This can give an unauthenticated remote attacker full access to the Node-RED server, where the...

10CVSS9.8AI score0.00297EPSS
Exploits0References13
Rows per page
Query Builder