Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-41766

Stack buffer overflow on parsing web request

Description

A low-privileged remote attacker can trigger a stack-based buffer overflow via a crafted HTTP POST request using the ubr-network method resulting in full device compromise.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MBS UBR-01 Mk II

Default version status: unaffected

  • 0.0.0 to < 6.0.1.0affected

MBS UBR-02

Default version status: unaffected

  • 0.0.0 to < 6.0.1.0affected

MBS UBR-LON

Default version status: unaffected

  • 0.0.0 to < 6.0.1.0affected

References