CVE-2025-35996 — AI Deep Analysis Summary

🚨 **Essence**: KUNBUS PiCtory (v2.11.1 & older) has a **File Name Unescaped** flaw. <br>💥 **Consequences**: Leads to **Cross-Site Scripting (XSS)**.…

🛡️ **Root Cause**: **CWE-97** (Improper Neutralization of Special Elements in Output Used by a Web Feature).…

🏭 **Affected Vendor**: KUNBUS GmbH. <br>📦 **Product**: Revolution Pi PiCtory. <br>📉 **Versions**: **2.11.1 and earlier**. If you are running an older version, you are at risk.

💻 **Attacker Actions**: <br>1. Execute arbitrary **JavaScript** in the victim's browser. <br>2. Steal **session cookies** or credentials. <br>3. Perform actions on behalf of the user. <br>4.…

⚠️ **Exploitation Threshold**: **Medium**. <br>🔑 **Auth**: Requires **Low Privileges** (PR:L). <br>👁️ **UI**: Requires **User Interaction** (UI:R). <br>🌐 **Access**: Network Accessible (AV:N).…

🚫 **Public Exploit**: **No**. The `pocs` field is empty. <br>📢 **Wild Exploitation**: Currently **Low**. No known public Proof-of-Concept (PoC) or widespread automated attacks detected yet.…

🔍 **Self-Check**: <br>1. Check your PiCtory version. Is it **≤ 2.11.1**? <br>2. Inspect network traffic for unsanitized file names in HTML responses. <br>3.…

🛠️ **Official Fix**: **Yes**. <br>📥 **Patch**: Upgrade to a version **newer than 2.11.1**.…

🚧 **No Patch Workaround**: <br>1. **Restrict Access**: Limit access to PiCtory to trusted internal networks only. <br>2. **Input Validation**: If possible, enforce strict file naming conventions on the server side.…

🔥 **Urgency**: **High Priority**. <br>📅 **Published**: May 1, 2025. <br>⚡ **Reason**: CVSS Score is **High** (likely 8.0+ based on vector). It affects industrial control systems (ICS).…