KUNBUS Revolution Pi OS Command Injection Vulnerability
Vulnerability
An OS command injection vulnerability has been identified in KUNBUS Revolution Pi version 2022-07-28-revpi-buster. This vulnerability allows authenticated attackers to execute operating system commands on the device. The issue arises in the 'php/dal.php' endpoint, specifically within the 'arrSaveConfig' parameter.
Impact
Exploitation of this vulnerability could lead to unauthorized execution of operating system commands on the affected device.
Remediation
The vulnerability has been fixed in the KUNBUS Revolution Pi webstatus 2.4.2 release.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
5.2remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.