CVE-2025-41760mediumCWE-636

CVE-2025-41760: medium-severity vulnerability in MBS UBR-01 Mk II

Pass filter with Empty Table

Published

Follow this CVE+ Monitor UBR-01 Mk II+ Monitor UBR-02

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.9epss 0.4%
In short

An administrator can create a security filter that they believe blocks all traffic, but instead it accidentally allows everything through. This happens because the system treats an empty filter list as 'no restrictions' instead of 'block everything'.

Technical detail

A pass filter configured with an empty table in UBR fails to enforce intended traffic restrictions due to improper handling of empty ruleset logic. The vulnerability requires administrative access to configure the filter, but results in complete bypass of the intended filtering policy, allowing unrestricted network traffic when a deny-all posture was intended.

Summary generated and translated by AI from the official description.
An administrator may attempt to block all traffic by configuring a pass filter with an empty table. However, in UBR, an empty list does not enforce any restrictions and allows all network traffic to pass unfiltered.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products
MBS · UBR-01 Mk IIMBS · UBR-02MBS · UBR-LON
Related CVEs — MBS UBR-01 Mk II

In the same product, most dangerous first.

CVE-2025-41758HIGHArbitrary Write with wwwupload.cgiEPSS 0.6%CVE-2025-41757HIGHArbitrary Write with ubr-restoreEPSS 0.6%CVE-2025-41755MEDIUMArbitrary Read with ubr-logreadEPSS 0.6%CVE-2025-41766HIGHStack buffer overflow on parsing web requestEPSS 0.5%CVE-2025-41764CRITICALUnchecked role in wwwupdate.cgiEPSS 0.4%CVE-2025-41754MEDIUMArbitrary Read with ubr-editfileEPSS 0.4%