MBS vulnerabilities
Published CVEs affecting MBS products: 26 record(s), with severity, exploitation and fixes.
UBR-LON 15UBR-02 15UBR-01 Mk II 15Double-X x-link 11Triple-X PROFINET+M-Bus 11Triple-X PROFINET+LON 11Triple-X PROFINET+KNX 11Triple-X PROFINET+DALI 11Triple-X KNX+M-Bus 11Triple-X KNX+LON 11Triple-X KNX+DALI 11Single-A 11Double-X PROFINET 11Double-X M-Bus 11Double-X LON 11Double-X KNX 11Double-X DALI 11Double-X CAN 11Single-X 11Double-A x-link 11Double-A Profibus 11
CVE-2025-41754
Medium · 6.5
CWE-1242 Mar 9, 2026
Arbitrary Read with ubr-editfile
A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to read arbitrary files on the system.