CVE-2025-41767: Signature bypass on update upload
A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in the wwwupdate.cgi method in the web interface of UBR.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-41767?
CVE-2025-41767 is classified as a high-severity vulnerability due to its potential to allow a remote attacker to fully compromise the affected device.
How do I fix CVE-2025-41767?
To mitigate CVE-2025-41767, users should upgrade to the latest version of the Universal Bacnet Router Firmware that addresses the vulnerability.
Which devices are affected by CVE-2025-41767?
CVE-2025-41767 impacts devices running Universal Bacnet Router Firmware versions prior to 6.0.1.0.
What is the nature of the attack for CVE-2025-41767?
CVE-2025-41767 involves a signature bypass vulnerability that can be exploited via the wwwupdate.cgi method in the web interface.
Is there a workaround for CVE-2025-41767?
Currently, the recommended solution for CVE-2025-41767 is to update to the fixed firmware version, as no known workarounds are available.