CVE-2025-41772 | MBS UBR-01 Mk II/UBR-02/UBR-LON prior 6.0.1.0 URL Parameter wwwupdate.cgi get request method with sensitive query strings (mbs-2025-0001)

A vulnerability was found in MBS UBR-01 Mk II, UBR-02 and UBR-LON. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the file wwwupdate.cgi of the component URL Parameter Handler. The manipulation leads to use of get request method with sensitive query strings.

This vulnerability is documented as CVE-2025-41772. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.