CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 10.0. It may be remotely exploitable.
CVE
CVE-2025-24522
Severity
CRITICAL
CVSS
10
EPSS
0.77%
Original NVD Description
KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an unauthenticated remote attacker full access to the Node-RED server where they can run arbitrary commands on the underlying operating system.