← CVE Intelligence

CVE-2025-41767

Signature bypass on update upload PUBLISHED

Description (CNA)

A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in the wwwupdate.cgi method in the web interface of UBR.

Affected (CNA)

Vendor / productVersions
MBS / UBR-01 Mk IIaffected 0.0.0 before 6.0.1.0
MBS / UBR-02affected 0.0.0 before 6.0.1.0
MBS / UBR-LONaffected 0.0.0 before 6.0.1.0

CWE

CWE-347

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.