CVE-2025-41765

CRITICAL

mbs-solutions universal_bacnet_router_firmware < 6.0.1.0 - Unauthenticated Arbitrary File Upload

Title source: llm

Description

Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupload.cgi endpoint to upload and apply arbitrary data. This includes, but is not limited to, contact images, HTTPS certificates, system backups for restoration, server peer configurations, and BACnet/SC server certificates and keys.

References (1)

Core 1

Core References

Various Sources

https://www.mbs-solutions.de/mbs-2025-0001

Scores

CVSS v3 9.1

EPSS 0.0027

EPSS Percentile 17.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-862

Status published

Products (1)

mbs-solutions/universal_bacnet_router_firmware < 6.0.1.0

Published Mar 09, 2026

Tracked Since Mar 09, 2026