Kunbus manufactures industrial automation and IoT gateway products, notably its Modbus gateway and RevPi controller lines, that bridge operational technology networks and field devices. Vulnerabilities affecting the vendor skew strongly toward critical severity and frequently acquire public exploit code, centered on the recurring foundational issues of cleartext credential storage, weak authentication, and input validation defects that expose these edge-connected devices to direct compromise. Defenders should prioritize patching these products in exposed OT environments and inventory which firmware versions are deployed; current severity, exploitation activity, and CVE details are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Kunbus over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-41646CRITICAL An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device | Jun 6, 2025 | 9.8 | 65 | NO | YES |
CVE-2019-6527CRITICAL PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or | Feb 12, 2019 | 9.8 | 31 | NO | NO |
CVE-2019-6533CRITICAL Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Softwar | Feb 12, 2019 | 9.1 | 27 | NO | NO |
CVE-2019-6549HIGH An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) through FTP. | Feb 12, 2019 | 7.2 | 22 | NO | NO |
CVE-2019-6531HIGH An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) if the attacker i | Apr 2, 2019 | 8.1 | 20 | NO | NO |
CVE-2019-6529MEDIUM An attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway versions prior to release R02 (or Software Version 1.1.13166). | Jan 7, 2020 | 4.9 | 15 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Kunbus.
Media articles that mention a CVE ID that affects a product developed by Kunbus — matched by CVE ID, not by vendor name.