MBS UGW Stack Buffer Overflow Vulnerability Allowing Root Access

A stack buffer overflow vulnerability has been identified in the MBS Universal Gateway (UGW) web GUI, specifically in the UGW-A-Series and UGW-X-Series models, all running MBS Firmware prior to V6_0_0_7. This vulnerability allows remote attackers with user privileges to exploit the buffer overflow and execute arbitrary code with root privileges, leading to a full system compromise.

Impact

Exploitation of this vulnerability allows authenticated attackers to execute arbitrary code with root privileges on the affected device, potentially leading to a complete system compromise.

Remediation

Users are advised to update to MBS Firmware version V6_0_0_7, available at the MBS Firmware Update page.