CVE-2026-35080

HIGH

MBS Gateway Devices V1_0_0_0-V6_0_0_7 - ugw-restoreinfo Arbitrary File Deletion

Title source: manual

Description

The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

References (1)

Core 1

Core References

https://www.certvde.com/en/advisories/VDE-2026-039/

Scores

CVSS v3 8.1

EPSS 0.0037

EPSS Percentile 29.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-73

Status published

Products (37)

MBS/Double-A Profibus V1_00_00 - V6_00_07

MBS/Double-A Profibus V1_0_0_0 - V6_0_0_7

MBS/Double-A x-link V1_00_00 - V6_00_07

MBS/Double-A x-link V1_0_0_0 - V6_0_0_7

MBS/Double-X CAN V1_00_00 - V6_00_07

MBS/Double-X CAN V1_0_0_0 - V6_0_0_7

MBS/Double-X DALI V1_00_00 - V6_00_07

MBS/Double-X DALI V1_0_0_0 - V6_0_0_7

MBS/Double-X KNX V1_00_00 - V6_00_07

MBS/Double-X KNX V1_0_0_0 - V6_0_0_7

... and 27 more

Published Jun 03, 2026

Tracked Since Jun 03, 2026