medium6.5
CVE-2025-41754
A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to read arbitrary files on the syst…
Impact
A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to read arbitrary files on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbs-Solutions | Universal Bacnet Router Firmware | before 6.0.1.0 |