medium4.9
CVE-2025-41759
An administrator may attempt to block all networks by specifying "\*" or "all" as the network identifier.
Impact
An administrator may attempt to block all networks by specifying "\*" or "all" as the network identifier. However, these values are not supported and do not trigger any validation error. Instead, they are silently interpreted as network 0 which results in no networks being blocked at all.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbs-Solutions | Universal Bacnet Router Firmware | before 6.0.1.0 |