ZeroDay Findings
Sign inSign up

Findings

CVE-2025-41762

An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including pass…

Published Mar 9, 2026 · updated Jun 17, 2026 · mbs-solutions universal bacnet router firmware

An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including password hashes and certificates.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 9, 2026 · NIST NVD

    Detected

    An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including password hashes and certificates.

  2. Jun 17, 2026 · NIST NVD

    Updated

    An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including password hashes and certificates.

Affected

  • cpe mbs-solutions/universal bacnet router firmwareversion unspecified

Sources

  • NIST NVDVulnerability recordCVE-2025-41762

    An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including password hashes and certificates.

    nvd.nist.gov

References