This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis →
Q1What is this vulnerability? (Essence + Consequences)
🚨 **Essence**: MBS devices have a critical flaw in `wwwupload.cgi`. <br>🔥 **Consequences**: Attackers can upload and execute **arbitrary data**. This leads to **High Integrity** and **High Availability** impact.…
📦 **Affected Products**: <br>1. MBS UBR-01 Mk II <br>2. MBS UBR-02 <br>3. MBS UBR-LON <br>🏭 **Vendor**: MBS (German company). These are remote base stations & industrial comms interfaces.
Q4What can hackers do? (Privileges/Data)
💀 **Hacker Actions**: <br>• Upload **any file** (malware, scripts). <br>• **Apply/Execute** that data on the device. <br>• Gain full control over the remote base station.…
🔓 **Threshold**: **LOW**. <br>• **Auth**: None required (PR:N). <br>• **Access**: Network (AV:N). <br>• **Complexity**: Low (AC:L). <br>• **UI**: None needed (UI:N). <br>Anyone on the network can exploit this easily!
Q6Is there a public Exp? (PoC/Wild Exploitation)
🕵️ **Public Exploit**: **No**. <br>The `pocs` field is empty. No public Proof-of-Concept or wild exploitation code is currently available. However, the CVSS score suggests it is trivial to write one.
Q7How to self-check? (Features/Scanning)
🔍 **Self-Check**: <br>1. Identify if you use MBS UBR-01 Mk II, UBR-02, or UBR-LON. <br>2. Scan for the `wwwupload.cgi` endpoint. <br>3. Test if you can POST to it without authentication.…
🩹 **Official Fix**: **Yes**. <br>MBS released an advisory: **MBS-2025-0001**. <br>🔗 Link: https://www.mbs-solutions.de/mbs-2025-0001 <br>Check the vendor site for patches or configuration updates.
Q9What if no patch? (Workaround)
🚧 **No Patch? Workaround**: <br>1. **Isolate**: Block network access to these devices. <br>2. **Firewall**: Restrict access to `wwwupload.cgi` strictly. <br>3.…
🔥 **Urgency**: **CRITICAL**. <br>• CVSS Score: **High** (H/I, H/A). <br>• No Auth Required. <br>• Industrial Impact. <br>👉 **Action**: Patch immediately or isolate from the network. Do not ignore this!