KUNBUS RevPi Webstatus
Successful exploitation of this vulnerability could allow attackers to bypass authentication and gain unauthorized access to the application.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-41646US | — | Exploit | ||
An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-191-09 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-191-09 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (3)
- MitigationRevolution Pi OS Bullseye
KUNBUS has identified the following specific workarounds and mitigations users can apply to reduce risk:
- MitigationRevolution Pi webstatus
KUNBUS has identified the following specific workarounds and mitigations users can apply to reduce risk:
- BehobenRevolution Pi webstatus
For Revolution Pi Webstatus Version 2.4.5 and prior: Install the updated package Version 2.4.6 either using apt-get update && apt-get upgrade or download it manually and install via dpkg.
https://packages.revolutionpi.de/pool/main/r/revpi-webstatus/revpi-webstatus_2.4.6-1+revpi11+1_all.deb
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan