Vulnerabilities

CVE-2025-41646 is a critical authentication bypass in the KUNBUS RevPi Status software package, caused by an incorrect type conversion (CWE-704). An unauthenticated remote attacker can trigger the flawed conversion over the network, without any privileges or user interaction, and thereby bypass the package's authentication entirely. Successful exploitation grants full control of the affected device, compromising confidentiality, integrity, and availability. Affected parties are operators of KUNBUS Revolution Pi (RevPi) industrial devices running the RevPi Status package, with specific version ranges not provided in the source data. As of now there is no known public proof-of-concept, no CISA KEV listing, and no confirmed in-the-wild exploitation, though the 51.5% EPSS score (99th percentile) indicates a high probability of exploitation within the next 30 days.

Do: Inventory RevPi devices for the RevPi Status package and, until a vendor update is applied, restrict network access to the service from untrusted networks. Apply the patched version as published in the VDE CERT advisory for CVE-2025-41646 (fixed versions are not specified in the source data), and monitor for a public exploit given the elevated EPSS score.

An attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway versions prior to release R02 (or Software Version 1.1.13166).

An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) if the attacker is in an MITM position.

PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted.