Description
KUNBUS Revolution Pi是KUNBUS公司的一款基于 Raspberry Pi 的开放式、模块化且经济高效的工业 PC。 KUNBUS Revolution Pi存在操作系统命令注入漏洞，该漏洞源于php/dal.php端点的arrSaveConfig参数包含一个操作系统命令注入漏洞。
KUNBUS Revolution Pi 操作系统命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-8684
https://www.ioactive.com/wp-content/uploads/2025/05/IOA-SecAdvisory-KUNBUS-Revolution-Pi.pdf
https://www.nsfocus.net/vulndb/117807
https://www.pentestpartners.com/security-blog/rces-and-more-in-the-kunbus-gmbh-revolution-pi-plc/
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-kunbus-gmbhs-revolution-pi
https://vuldb.com/?id.295099
https://revolutionpi.com/en/support/security-advisories/kunbus-2024-0000001