high7.2
CVE-2025-41767
A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in the wwwupdate.cgi method in the web in…
Impact
A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in the wwwupdate.cgi method in the web interface of UBR.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbs-Solutions | Universal Bacnet Router Firmware | before 6.0.1.0 |