MBS Universal Gateway Arbitrary File Deletion Vulnerability

A vulnerability in the ugw-restore method allows remote attackers with user privileges to delete arbitrary local files on affected MBS Universal Gateway devices. This issue arises from inadequate validation of user-controlled input. The vulnerability affects several MBS Universal Gateway models running firmware versions prior to 6.0.0.7.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of local files on the affected device.

Remediation

Users are advised to update to MBS firmware version 6.0.0.7, available at the MBS Firmware Update page.