Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2025-41762

Secret leak with wwwdnload.cgi

Description

An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including password hashes and certificates.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MBS UBR-01 Mk II

Default version status: unaffected

  • 0.0.0 to < 6.0.1.0affected

MBS UBR-02

Default version status: unaffected

  • 0.0.0 to < 6.0.1.0affected

MBS UBR-LON

Default version status: unaffected

  • 0.0.0 to < 6.0.1.0affected

References