MBS Universal BACnet Router Session Token Exposure Vulnerability in wwwupdate.cgi

A vulnerability exists in the MBS Universal BACnet Router's web interface, specifically within the wwwupdate.cgi endpoint. Unauthenticated remote attackers can access valid session tokens, which are transmitted in plaintext via URL parameters. This exposure increases the risk of session token interception, potentially allowing unauthorized access to user accounts. The vulnerability affects all UBR firmware versions prior to 6.0.1.0.

Impact

The exposure of session tokens in URLs can lead to unauthorized access by allowing attackers to hijack user sessions. This is particularly concerning as session tokens on this device do not expire, creating a persistent vulnerability.

Remediation

Users are advised to update to the latest UBR firmware version 6.0.1.0, which addresses this vulnerability. For more details, please check the release notes on the MBS Solutions website.