universal bacnet router firmware vulnerabilities and fixes

Recent CVEs affecting universal bacnet router firmware, with upgrade or downgrade steps. 15 tracked.

Also searched as: universalbacnetrouterfirmware.

universal bacnet router firmware has 15 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 15. Most recent: 2026-03-09. Highest priority: CVE-2025-41764 (score 46/100).

• CVE-2025-41772 HIGH 7.5 UPGRADE An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext withi
• CVE-2025-41767 HIGH 7.2 UPGRADE A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulner
• CVE-2025-41766 HIGH 8.8 UPGRADE A low-privileged remote attacker can trigger a stack-based buffer overflow via a crafted HTTP POST request usi
• CVE-2025-41765 CRITICAL 9.1 UPGRADE Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupload.cgi e
• CVE-2025-41764 CRITICAL 9.1 UPGRADE Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupdate.cgi e
• CVE-2025-41763 MEDIUM 6.5 UPGRADE A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resourc
• CVE-2025-41762 MEDIUM 6.2 UPGRADE An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to g
• CVE-2025-41761 HIGH 7.8 UPGRADE A low‑privileged local attacker who gains access to the UBR service account (e.g., via SSH) can escalate privi
• CVE-2025-41760 MEDIUM 4.9 UPGRADE An administrator may attempt to block all traffic by configuring a pass filter with an empty table
• CVE-2025-41759 MEDIUM 4.9 UPGRADE An administrator may attempt to block all networks by specifying "\*" or "all" as the network identifier
• CVE-2025-41758 HIGH 8.8 UPGRADE A low-privileged remote attacker can exploit an arbitrary file write vulnerability in the wwupload.cgi endpoin
• CVE-2025-41757 HIGH 8.8 UPGRADE A low-privileged remote attacker can abuse the backup restore functionality of UBR (ubr-restore) which runs wi
• CVE-2025-41756 HIGH 8.1 UPGRADE A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused
• CVE-2025-41755 MEDIUM 6.5 UPGRADE A low-privileged remote attacker can exploit the ubr-logread method in wwwubr.cgi to read arbitrary files on t
• CVE-2025-41754 MEDIUM 6.5 UPGRADE A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused

FAQ

How do I fix universal bacnet router firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is universal bacnet router firmware being exploited right now?

None of the tracked universal bacnet router firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which universal bacnet router firmware CVE should I patch first?

CVE-2025-41764 currently ranks highest (46/100): Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupdate.cgi e.

RSS feed for universal bacnet router firmware · ← Back to latest CVEs