← Database

CVE-2025-41761

HIGH CVSS: 7.8 Published: 2026-03-09 Modified: 2026-06-17

Description

A low‑privileged local attacker who gains access to the UBR service account (e.g., via SSH) can escalate privileges to obtain full system access. This is due to the service account being permitted to execute certain binaries (e.g., tcpdump and ip) with sudo.

Affected Platforms

Mbs-Solutions Ubr-01 Mk IiMbs-Solutions Universal Bacnet Router FirmwareMbs-Solutions Ubr-02Mbs-Solutions Ubr-Lon

Weakness Type

CWE-88

References