CVE-2025-41761: A low‑privileged local attacker who gains access to the UBR service account (e.g., via SSH) can escalate privileges to obtain full system access. This is due…

PriorityP344high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.16%

5.6th percentile

A low‑privileged local attacker who gains access to the UBR service account (e.g., via SSH) can escalate privileges to obtain full system access. This is due to the service account being permitted to execute certain binaries (e.g., tcpdump and ip) with sudo.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
mbs-solutions	universal_bacnet_router_firmware	< 6.0.1.0	6.0.1.0
mbs	ubr-01_mk_ii	>= 0.0.0 < 6.0.1.0	6.0.1.0
mbs	ubr-02	>= 0.0.0 < 6.0.1.0	6.0.1.0
mbs	ubr-lon	>= 0.0.0 < 6.0.1.0	6.0.1.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.