Approved changes feed: RSS · Atom

cpe:2.3:a:kunbus_gmbh:revolution_pi:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKunbus Gmbh (b18a30e2-480d-5ae2-89c2-bcd007e19b9b)
ProductRevolution Pi (d37818ca-423b-50b0-a7a7-7876e015218e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8685 vulnerable 2026-06-08 07:00:25.386164 Path-Traversal vulnerability in Revolution Pi
MEDIUM (4.3)
Path-Traversal vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability could allow an authenticated attacker to list device directories via the ‘/pictory/php/getFileList.php’ endpoint in the ‘dir’ parameter.
Published: 2025-02-10T12:46:27.511Z
Updated: 2025-02-12T15:44:16.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8684 vulnerable 2026-06-08 07:00:25.385691 OS Command Injection vulnerability in Revolution Pi
HIGH (8.3)
OS Command Injection vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability could allow an authenticated attacker to execute OS commands on the device via the ‘php/dal.php’ endpoint, in the ‘arrSaveConfig’ parameter.
Published: 2025-02-10T12:45:35.339Z
Updated: 2025-02-12T15:43:30.941Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.