CVE-2025-41759: Use of wildcard (“*” or “all”) in Block list
An administrator may attempt to block all networks by specifying "\" or "all" as the network identifier. However, these values are not supported and do not trigger any validation error. Instead, they are silently interpreted as network 0 which results in no networks being blocked at all.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-41759?
CVE-2025-41759 is classified as a high severity vulnerability due to the potential for unauthorized network access.
How do I fix CVE-2025-41759?
To fix CVE-2025-41759, ensure that no wildcard characters like '*' or 'all' are used in the block list and perform a proper validation of network identifiers.
What system components are affected by CVE-2025-41759?
CVE-2025-41759 affects the Mbs-solutions Universal Bacnet Router Firmware version prior to 6.0.1.0.
What can happen if CVE-2025-41759 is exploited?
Exploitation of CVE-2025-41759 can allow unauthorized devices to communicate with the network, undermining security measures.
Who is responsible for the CVE-2025-41759 vulnerability?
The CVE-2025-41759 vulnerability is the responsibility of Mbs-solutions, the vendor of the affected firmware.