CVE-2025-41763: Unchecked role in wwwdnload.cgi
A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups and certificate request files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-41763?
CVE-2025-41763 is classified as a low-severity vulnerability due to the requirement for low-privileged remote access.
How do I fix CVE-2025-41763?
To mitigate CVE-2025-41763, ensure that proper authentication and access controls are enforced for the wwwdnload.cgi endpoint.
What types of resources can be accessed through CVE-2025-41763?
CVE-2025-41763 allows attackers to access sensitive resources such as system backups and certificate request files.
Which software versions are affected by CVE-2025-41763?
CVE-2025-41763 affects Mbs-solutions Universal Bacnet Router Firmware versions prior to 6.0.1.0.
Who is vulnerable to the CVE-2025-41763 exploitation?
Organizations using the affected versions of Mbs-solutions Universal Bacnet Router Firmware are vulnerable to exploitation of CVE-2025-41763.