medium4.9
CVE-2025-41760
An administrator may attempt to block all traffic by configuring a pass filter with an empty table.
Impact
An administrator may attempt to block all traffic by configuring a pass filter with an empty table. However, in UBR, an empty list does not enforce any restrictions and allows all network traffic to pass unfiltered.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbs-Solutions | Universal Bacnet Router Firmware | before 6.0.1.0 |