CVE Feed

    Dashboard / CVE / CVE-2025-41765

    CVE-2025-41765

    Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupload.cgi endpoint to upload and apply arbitrary data. This includes, but is not limited to, contact images, HTTPS certificates, system backups for restoration, server peer configurations, and BACnet/SC server certificates and keys.

    Published:Mar 9, 2026
    Last Modified:Mar 11, 2026
    EPS:Mar 9, 2026
    EPSS Score:0.00058
    CVSS Score:9.1

    Affected Products

    Vendor
    Mbs
    Product
    Ubr-01 Mk Ii
    Vendor
    Mbs
    Product
    Ubr-02
    Vendor
    Mbs
    Product
    Ubr-lon
    Vendor
    Mbs-solutions
    Product
    Ubr-01 Mk Ii
    Vendor
    Mbs-solutions
    Product
    Ubr-02
    Vendor
    Mbs-solutions
    Product
    Ubr-lon
    Vendor
    Mbs-solutions
    Product
    Universal Bacnet Router Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-862 Missing Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Related CVEs

    CVE-2025-41772 (CVSS 7.5) — An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext withi…
    CVE-2025-41767 (CVSS 7.2) — A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulner…
    CVE-2025-41766 (CVSS 8.8) — A low-privileged remote attacker can trigger a stack-based buffer overflow via a crafted HTTP POST request usi…
    CVE-2025-41764 (CVSS 9.1) — Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupdate.cgi e…
    CVE-2025-41763 (CVSS 6.5) — A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resourc…
    CVE-2025-41762 (CVSS 6.2) — An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to g…
    CVE-2025-41761 (CVSS 7.8) — A low‑privileged local attacker who gains access to the UBR service account (e.g., via SSH) can escalate privi…
    CVE-2025-41760 (CVSS 4.9) — An administrator may attempt to block all traffic by configuring a pass filter with an empty table. However, i…
    CVE-2025-41759 (CVSS 4.9) — An administrator may attempt to block all networks by specifying "\*" or "all" as the network identifier. Howe…
    CVE-2025-41758 (CVSS 8.8) — A low-privileged remote attacker can exploit an arbitrary file write vulnerability in the wwupload.cgi endpoin…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High