MBS Universal BACnet Router Privilege Escalation Vulnerability

A vulnerability exists in the MBS Universal BACnet Router's UBR service account, allowing low-privileged local attackers who gain access to the account (e.g., via SSH) to escalate privileges and obtain full system access. This issue arises because the service account can execute certain binaries, such as tcpdump and ip, with sudo privileges. Exploitation of this vulnerability could lead to unauthorized actions with elevated rights, potentially compromising the entire system.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, giving an attacker full access to the system.

Remediation

Users are advised to update to the latest UBR firmware version 6.0.1.0, which addresses this vulnerability.