Description
A low-privileged remote attacker can exploit an arbitrary file write vulnerability in the wwupload.cgi endpoint. Due to path traversal this can lead to overwriting arbitrary files on the device and achieving a full system compromise.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
MBS UBR-01 Mk II
Default version status: unaffected
0.0.0 to < 6.0.1.0affected
MBS UBR-02
Default version status: unaffected
0.0.0 to < 6.0.1.0affected
MBS UBR-LON
Default version status: unaffected
0.0.0 to < 6.0.1.0affected