CVE-2020-25191CWE-732
Incorrect permissions are set by default for an API entry-point of a specific service, allowing a non-authenticated user to trigger a function that could…
published December 11, 2020
What it is
Incorrect permissions are set by default for an API entry-point of a specific service, allowing a non-authenticated user to trigger a function that could reboot the CompactRIO (Driver versions prior to 20.5) remotely.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01123 · 66.0th percentile
- Weakness
- CWE-732 · Incorrect Permission Assignment for Critical Resource
- Published
- 2020-12-11T01:46Z
EPSS history
Timeline