CVE-2025-24522
published 2025-05-01CVE-2025-24522: KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an…
PriorityP277critical10CVSS 3.1
AVNACLPRNUINSCCHIHAH
EPSS
0.71%
49.0th percentile
KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an unauthenticated remote attacker full access to the Node-RED server where they can run arbitrary commands on the underlying operating system.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| kunbus_gmbh | revolution_pi_os_bookworm | <= 01/2025 | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Node-RED server on Revolution Pi OS Bookworm 01/2025 has no authentication configured by default — detect unauthenticated remote access to the Node-RED HTTP endpoint (typically TCP/1880) from non-local sources as a strong indicator of exploitation ↗
- →Monitor for arbitrary OS command execution originating from the Node-RED process on Revolution Pi devices, which would indicate successful exploitation of CVE-2025-24522 ↗
- →Alert on any inbound network connections to Revolution Pi devices on the Node-RED default port from internet-routable addresses; the vulnerability is exploitable remotely with low attack complexity and no authentication required (CVSS v3.1 10.0, AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) ↗
- ·The vulnerability exists because Node-RED authentication is NOT configured by default on Revolution Pi OS Bookworm 01/2025 — affected versions are 01/2025 and earlier; a patched OS image was released 04/30/2025 ↗
- ·No known public exploitation specifically targeting this vulnerability had been reported to CISA at time of advisory publication ↗
CVSS provenance
nvdv3.110.0CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
nvdv4.09.3CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
KUNBUS GmbH Revolution Pi (Update A)
cisa_ics·2025-07-10·CVSS 10.0
[CRITICAL] KUNBUS GmbH Revolution Pi (Update A)
ICS Advisory
##
KUNBUS GmbH Revolution Pi (Update A)
Last RevisedJuly 10, 2025
Alert CodeICSA-25-121-01
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 9.3
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: KUNBUS
- Equipment: Revolution Pi
- Vulnerabilities: Missing Authentication for Critical Function, Authentication Bypass by Primary Weakness, Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow attackers to bypass authentication, gain unauthorized access to critical functions, and execute malicious server-side includes (SSI) within a web page.
## 3. TEC
GHSA
GHSA-mv7w-j26m-h74p: KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server
ghsa_unreviewed·2025-05-02
CVE-2025-24522 [CRITICAL] CWE-305 GHSA-mv7w-j26m-h74p: KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server
KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an unauthenticated remote attacker full access to the Node-RED server where they can run arbitrary commands on the underlying operating system.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-05-01
Published