Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including password hashes and certificates.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
CVE-2025-41762 An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including pas… https://www.cve.org/CVERecord?id=CVE-2025-41762
Post summary
A newly disclosed CVE explains that an unauthenticated attacker can exploit weak hashing in a backup download endpoint to access sensitive data.
CVE-2025-41762 Unauthenticated Data Exposure in wwwdnload.cgi via Weak Hash Mechanism https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-41762
Post summary
CVE-2025-41762 is an unauthenticated data exposure vulnerability discovered in wwwdnload.cgi due to a weak hash mechanism, with detailed information available through a Vulmon link.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | mbs-solutions | ubr-01_mk_ii | - | - | - |
| HW | mbs-solutions | ubr-02 | - | - | - |
| HW | mbs-solutions | ubr-lon | - | - | - |
| OS | mbs-solutions | universal_bacnet_router_firmware | - | - | - |