Vulnerability Details CVE-2025-41766
A low-privileged remote attacker can trigger a stack-based buffer overflow via a crafted HTTP POST request using the ubr-network method resulting in full device compromise.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.8%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2025-41766
-
cpe:2.3:h:mbs-solutions:ubr-01_mk_ii:-
-
cpe:2.3:h:mbs-solutions:ubr-02:-
-
cpe:2.3:h:mbs-solutions:ubr-lon:-
-
cpe:2.3:o:mbs-solutions:universal_bacnet_router_firmware:*