critical9.1
CVE-2025-41764
Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupdate.cgi endpoint to upload and apply arbitrary updates.
Impact
Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupdate.cgi endpoint to upload and apply arbitrary updates.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbs-Solutions | Universal Bacnet Router Firmware | before 6.0.1.0 |