MBS Universal Gateways UGW Web GUI Arbitrary File Access Vulnerability

A vulnerability in the MBS Universal Gateways (UGW-A-Series, UGW-X-Series) web GUI allows remote attackers with user privileges to access arbitrary local files. This issue arises from inadequate validation of user-supplied input in the ugw-logread method. The vulnerability affects devices running MBS Firmware versions prior to 6.0.0.7.

Impact

Exploitation of this vulnerability could enable an authenticated attacker to read or delete arbitrary local files on the affected UGW devices, potentially leading to unauthorized access through a known service account password. Additionally, this vulnerability could be exploited in conjunction with other identified vulnerabilities to execute arbitrary code with root privileges, resulting in a full system compromise.

Remediation

Users are advised to update the affected products to firmware version 6.0.0.7, available at the MBS Firmware Update page.