CVE-2025-41755: medium-severity vulnerability in MBS UBR-01 Mk II
Arbitrary Read with ubr-logread
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A remote attacker with low privileges can read any file on the system through a flaw in the ubr-logread method that doesn't validate which files can be accessed. This allows exposure of sensitive information like configuration files or credentials.
The wwwubr.cgi endpoint's ubr-logread method accepts an unsanitized log file path parameter (CWE-22: Path Traversal), permitting unauthenticated or low-privileged remote attackers to retrieve arbitrary files. No input validation prevents modification of the file reference from intended log paths to sensitive system files, resulting in unauthorized information disclosure.
In the same product, most dangerous first.