CVE-2025-41757: high-severity vulnerability in MBS UBR-01 Mk II
Arbitrary Write with ubr-restore
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A backup restore tool runs with high privileges but doesn't check what files are inside backup archives, letting attackers create or overwrite any file on the system by crafting malicious backups.
The ubr-restore utility executes with elevated privileges and lacks input validation on backup archive contents, enabling arbitrary file write/overwrite attacks via CWE-22 (Path Traversal). A remote low-privileged attacker can exploit this by submitting a crafted backup file, bypassing access controls to modify critical system files.
In the same product, most dangerous first.