Vulnerability Details CVE-2025-41757
A low-privileged remote attacker can abuse the backup restore functionality of UBR (ubr-restore) which runs with elevated privileges and does not validate the contents of the backup archive to create or overwrite arbitrary files anywhere on the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.5%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2025-41757
-
cpe:2.3:h:mbs-solutions:ubr-01_mk_ii:-
-
cpe:2.3:h:mbs-solutions:ubr-02:-
-
cpe:2.3:h:mbs-solutions:ubr-lon:-
-
cpe:2.3:o:mbs-solutions:universal_bacnet_router_firmware:*