KUNBUS Revolution Pi 操作系统命令注入漏洞

KUNBUS Revolution Pi is an open, modular and cost-effective industrial PC based on Raspberry Pi from KUNBUS. The KUNBUS Revolution Pi suffers from an operating system command injection vulnerability that stems from the arrSaveConfig parameter of the php/dal.php endpoint containing an operating...

PT-2025-6038

Name of the Vulnerable Software and Affected Versions Revolution Pi version 2022-07-28-revpi-buster Description This issue allows an authenticated attacker to execute OS commands on the device via the 'php/dal.php' endpoint, in the arrSaveConfig parameter. Recommendations For Revolution Pi versio...

CVE-2024-8684: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability could allow an authenticated attacker to execute OS commands on the device via the ‘php/dal.php’ endpoint, in the ‘arrSaveConfig’ parameter...