Mbs-solutions Vulnerabilities

An attacker can steal valid session tokens from the universal BACnet router firmware because these tokens are visible in the web address used to access the device's update page. This can be done remotely and without needing to log in, making it easy for anyone to exploit if they know the URL.

An attacker can take complete control of the universal BACnet router by exploiting a flaw in its web interface that allows them to bypass security checks when updating the device. This can be done remotely, meaning the attacker doesn't need physical access to the device, making it a serious risk.

This vulnerability allows a low-privileged remote attacker to take complete control of a device by sending a specially crafted HTTP POST request. The attacker only needs network access to the device to exploit this weakness, making it a serious risk for systems using this firmware.

This vulnerability allows a low-privileged attacker who can access the UBR service account to gain full control of the system by using certain commands with elevated permissions. The attacker typically needs to access the system through methods like SSH to exploit this weakness.

This vulnerability allows a remote attacker with low privileges to overwrite any file on the device, potentially taking full control of the system. It exploits a flaw in the wwupload.cgi endpoint, which means the attacker can manipulate file paths to access and change critical files.

An attacker with low-level access can exploit a flaw in the backup restore feature of the universal BACnet router firmware to create or overwrite any files on the system, potentially taking full control. This can happen without proper checks on the backup files, making it easy for the attacker to manipulate the system.

A low-level attacker can use a hidden API to write any file they want on the system, potentially allowing them to take control or disrupt operations. This vulnerability can be exploited remotely without needing special access, making it particularly dangerous.