Skip to contentMbs-solutions Universal Bacnet Router Firmware vulnerabilities
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 morewwwupdate.cgi Session token in URLCVE-2025-417727.5 High
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 moreSignature bypass on update uploadCVE-2025-417677.2 High
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 moreStack buffer overflow on parsing web requestCVE-2025-417668.8 High
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 moreUnchecked role in wwwupload.cgiCVE-2025-417659.1 Critical
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 moreUnchecked role in wwwupdate.cgiCVE-2025-417649.1 Critical
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 moreUnchecked role in wwwdnload.cgiCVE-2025-417636.5 Medium
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 moreSecret leak with wwwdnload.cgiCVE-2025-417626.2 Medium
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 morePrivilege escalation possibleCVE-2025-417617.8 High
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 morePass filter with Empty TableCVE-2025-417604.9 Medium
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 moreUse of wildcard (“*” or “all”) in Block listCVE-2025-417594.9 Medium
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 moreArbitrary Write with wwwupload.cgiCVE-2025-417588.8 High
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 moreArbitrary Write with ubr-restoreCVE-2025-417578.8 High
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 moreArbitrary Write with ubr-editfileCVE-2025-417568.1 High
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 moreArbitrary Read with ubr-logreadCVE-2025-417556.5 Medium
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 moreArbitrary Read with ubr-editfileCVE-2025-417546.5 Medium