CVE-2020-25191

CVE-2020-25191 describes an incorrect default permission setting in an API entry-point of National Instruments (NI) CompactRIO devices (driver versions prior to 20.5). This vulnerability allows an unauthenticated attacker to remotely trigger a function that reboots the device, resulting in a denial of service. With a CVSS score of 7.5 (High), it is easily exploitable over the network with low attack complexity and no user interaction required. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity community.