Description
Incorrect permissions are set by default for an API entry-point of a specific service, allowing a non-authenticated user to trigger a function that could reboot the CompactRIO (Driver versions prior to 20.5) remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | CompactRIO | Driver versions prior to 20.5 | — |
Advisories 1
- ICSA-20-338-01 National Instruments CompactRIO CISA ICS & IT advisories · Dec 3, 2020