Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2025-41764

Unchecked role in wwwupdate.cgi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupdate.cgi endpoint to upload and apply arbitrary updates.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MBS UBR-01 Mk II

Default version status: unaffected

  • 0.0.0 to < 6.0.1.0affected

MBS UBR-02

Default version status: unaffected

  • 0.0.0 to < 6.0.1.0affected

MBS UBR-LON

Default version status: unaffected

  • 0.0.0 to < 6.0.1.0affected

References