← CVE Intelligence

CVE-2025-41762

Secret leak with wwwdnload.cgi PUBLISHED

Description (CNA)

An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including password hashes and certificates.

Affected (CNA)

Vendor / productVersions
MBS / UBR-01 Mk IIaffected 0.0.0 before 6.0.1.0
MBS / UBR-02affected 0.0.0 before 6.0.1.0
MBS / UBR-LONaffected 0.0.0 before 6.0.1.0

CWE

CWE-328

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.