CVE-2025-41762

MEDIUM

6.2

Description

An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including password hashes and certificates.

CVE Details

CVSS v3.1 Score6.2

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published3/9/2026

Last Modified3/11/2026

Sourcenvd

Honeypot Sightings0

Affected Products

mbs-solutions:ubr-01_mk_iimbs-solutions:ubr-02mbs-solutions:ubr-lonmbs-solutions:universal_bacnet_router_firmware

Weaknesses (CWE)

CWE-328

References

https://www.mbs-solutions.de/mbs-2025-0001(info@cert.vde.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.