Description
KUNBUS Revolution Pi是KUNBUS公司的一款基于 Raspberry Pi 的开放式、模块化且经济高效的工业 PC。 KUNBUS Revolution Pi存在路径遍历漏洞，该漏洞源于/pictory/php/getFileList.php页面的dir参数包含一个路径遍历漏洞。
KUNBUS Revolution Pi 路径遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-8685
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-kunbus-gmbhs-revolution-pi
https://www.ioactive.com/wp-content/uploads/2025/05/IOA-SecAdvisory-KUNBUS-Revolution-Pi.pdf
https://www.pentestpartners.com/security-blog/rces-and-more-in-the-kunbus-gmbh-revolution-pi-plc/
https://revolutionpi.com/en/support/security-advisories
https://www.nsfocus.net/vulndb/117807
https://avd.aliyun.com/detail?id=AVD-2025-32011
https://cve.imfht.com/detail/CVE-2025-32011
https://www.heise.de/en/news/Kunbus-RevolutionPi-CISA-warning-about-security-vulnerabilities-10372387.html