← Database
CVE-2025-41767
HIGH
CVSS: 7.2
Published: 2026-03-09
Modified: 2026-06-17
Description
A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in the wwwupdate.cgi method in the web interface of UBR.
Affected Platforms
Mbs-Solutions Ubr-01 Mk IiMbs-Solutions Universal Bacnet Router FirmwareMbs-Solutions Ubr-02Mbs-Solutions Ubr-Lon