CVE-2025-41761

7.8 highEPSS 0.2%

High (7.8) in mbs-solutions universal bacnet router firmware. EPSS 0.2% chance of exploitation in the next 30 days.

A low‑privileged local attacker who gains access to the UBR service account (e.g., via SSH) can escalate privileges to obtain full system access. This is due to the service account being permitted to execute certain binaries (e.g., tcpdump and ip) with sudo.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
CWE: CWE-88
Published: 2026-03-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mbs-solutions:universal_bacnet_router_firmware

References

https://www.mbs-solutions.de/mbs-2025-0001

Check your stack JSON