MBS Universal BACnet Routers Unchecked Authorization Vulnerability in wwwupdate.cgi Endpoint Allowing Arbitrary Update Uploads

A vulnerability exists in the MBS Universal BACnet Router's web interface, specifically within the wwwupdate.cgi endpoint. This issue arises from inadequate authorization checks, enabling unauthorized remote attackers to upload and apply arbitrary updates. The vulnerability affects both the 32 MB and 64 MB RAM versions of the router's firmware.

Impact

Exploitation of this vulnerability allows an attacker to upload and apply arbitrary updates, potentially introducing malicious code or overwriting existing files with harmful ones. An attacker could exploit this by uploading a previous update containing known vulnerabilities.

Remediation

Users are advised to update to the latest firmware version 6.0.1.0 for the Universal BACnet Router. For more details, please check the release notes on the MBS Solutions website.