Description
KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an unauthenticated remote attacker full access to the Node-RED server where they can run arbitrary commands on the underlying operating system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| KUNBUS | Revolution Pi OS Bookworm | ≤ 01/2025 | — |
Advisories 1
- ICSA-25-121-01 KUNBUS GmbH Revolution Pi (Update A) CISA ICS & IT advisories · Jul 10, 2025