Vulnerability Details CVE-2025-41767
A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in the wwwupdate.cgi method in the web interface of UBR.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.1%
CVSS Severity
CVSS v3 Score 7.2
References
Products affected by CVE-2025-41767
-
cpe:2.3:h:mbs-solutions:ubr-01_mk_ii:-
-
cpe:2.3:h:mbs-solutions:ubr-02:-
-
cpe:2.3:h:mbs-solutions:ubr-lon:-
-
cpe:2.3:o:mbs-solutions:universal_bacnet_router_firmware:*