by Kastro
Paper/Archive/CVE-2025-41646

CVE-2025-41646

Kunbus Revolution Pi webstatus — RevPi Webstatus application is vulnerable to an authentication bypass

EPSS 51%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 98.9.989 × 2019.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device

Affected

ProductAffectedFixed inSource
Revolution Pi webstatus0.0.0 – 2.4.5–CNA

Scores by source

CERTVDE (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorykunbus.com/en/productsecurity/Kunbus-2025-0000003advisorypsirt.kunbus.com/.well-known/csaf/white/2025/kunbus-2025-0000003.json