CVE-2025-41762
EUVD-2025-20837009.03.2026, 09:16
An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including password hashes and certificates.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mbs-solutions | universal_bacnet_router_firmware | 𝑥 < 6.0.1.0 |
𝑥
= Vulnerable software versions