CVE-2024-8685

Summary

CVE-2024-8685 is a newly disclosed path-traversal vulnerability affecting Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This issue enables authenticated attackers to access device directories by manipulating the 'dir' parameter in the 'getFileList.php' endpoint located at '/pictory/php/'. Successful exploitation of this vulnerability could lead to unauthorized access and potential data theft. Users are advised to update their Revolution Pi software as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.