Advisories · Technology
MBS UBR-02.
Every CVE that names MBS UBR-02 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
wwwupdate.cgi Session token in URL
- MBS UBR-01 Mk II
- MBS UBR-02
- CWE-598
- CVSS 7.2 High
Signature bypass on update upload
- MBS UBR-01 Mk II
- MBS UBR-02
- Weak cryptography or TLS
- CVSS 8.8 High
Stack buffer overflow on parsing web request
- MBS UBR-01 Mk II
- MBS UBR-02
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Unchecked role in wwwupload.cgi
- MBS UBR-01 Mk II
- MBS UBR-02
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Unchecked role in wwwupdate.cgi
- MBS UBR-01 Mk II
- MBS UBR-02
- Broken access control
- CVSS 6.5 Medium
Unchecked role in wwwdnload.cgi
- MBS UBR-01 Mk II
- MBS UBR-02
- Information disclosure
- CVSS 6.2 Medium
Secret leak with wwwdnload.cgi
- MBS UBR-01 Mk II
- MBS UBR-02
- Weak cryptography or TLS
- CVSS 7.8 High
Privilege escalation possible
- MBS UBR-01 Mk II
- MBS UBR-02
- Command injection
- CVSS 4.9 Medium
Pass filter with Empty Table
- MBS UBR-01 Mk II
- MBS UBR-02
- CWE-636
- CVSS 4.9 Medium
Use of wildcard (“*” or “all”) in Block list
- MBS UBR-01 Mk II
- MBS UBR-02
- CWE-636
- CVSS 8.8 High
Arbitrary Write with wwwupload.cgi
- MBS UBR-01 Mk II
- MBS UBR-02
- Path traversal
- CVSS 8.8 High
Arbitrary Write with ubr-restore
- MBS UBR-01 Mk II
- MBS UBR-02
- Path traversal
- CVSS 8.1 High
Arbitrary Write with ubr-editfile
- MBS UBR-01 Mk II
- MBS UBR-02
- CWE-1242
- CVSS 6.5 Medium
Arbitrary Read with ubr-logread
- MBS UBR-01 Mk II
- MBS UBR-02
- Path traversal
- CVSS 6.5 Medium
Arbitrary Read with ubr-editfile
- MBS UBR-01 Mk II
- MBS UBR-02
- CWE-1242