A low-privileged remote attacker can exploit an arbitrary file write vulnerability in the wwupload.cgi endpoint. Due to path traversal this can lead to overwriting arbitrary files on the device and achieving a full system compromise.
References
| Link | Resource |
|---|---|
| https://www.mbs-solutions.de/mbs-2025-0001 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
11 Mar 2026, 18:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.mbs-solutions.de/mbs-2025-0001 - Vendor Advisory | |
| Summary |
|
|
| CPE | cpe:2.3:h:mbs-solutions:ubr-02:-:*:*:*:*:*:*:* cpe:2.3:h:mbs-solutions:ubr-01_mk_ii:-:*:*:*:*:*:*:* cpe:2.3:h:mbs-solutions:ubr-lon:-:*:*:*:*:*:*:* cpe:2.3:o:mbs-solutions:universal_bacnet_router_firmware:*:*:*:*:*:*:*:* |
|
| First Time |
Mbs-solutions
Mbs-solutions ubr-lon Mbs-solutions ubr-01 Mk Ii Mbs-solutions ubr-02 Mbs-solutions universal Bacnet Router Firmware |
09 Mar 2026, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-09 09:15
Updated : 2026-03-11 18:26
NVD link : CVE-2025-41758
Mitre link : CVE-2025-41758
CVE.ORG link : CVE-2025-41758
JSON object : View
Products Affected
mbs-solutions
- ubr-lon
- ubr-02
- universal_bacnet_router_firmware
- ubr-01_mk_ii
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')