What is the CVSS score of CVE-2025-41764?

CVE-2025-41764 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H. EPSS exploitation probability: 0.1%.

How to fix or mitigate CVE-2025-41764?

Within 24 hours: Identify and inventory all affected systems; implement emergency network access controls to restrict wwwupdate.cgi endpoint access to trusted administrative networks only. Within 7 days: Deploy WAF rules to block unauthorized requests to wwwupdate.cgi; disable the update feature if operationally feasible; conduct threat hunting for signs of exploitation. Within 30 days: Develop and test emergency patching procedures; establish vendor communication for patch timeline; execute full remediation of all affected systems upon patch availability.

Universal Bacnet Router Firmware CVE-2025-41764

CRITICAL

Missing Authorization (CWE-862)

2026-03-09 info@cert.vde.com

Authentication Bypass Universal Bacnet Router Firmware Mbs Solutions

9.1

CVSS 3.1 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-862 OWASP Top 10:2025 A01:2025 - Broken Access Control ASVS 5.0 V8 - Authorization Authorization checks on every request MITRE ATT&CK 1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Impact	CVSS 9.1. Firmware replacement = complete and persistent device compromise.
Exploit ScenarioDerived	Attacker uploads malicious firmware through unprotected endpoint, gaining persistent control of the device.

Act Now Prioritize within 24-48h. Why: CRITICAL severity.

No patch listed yet 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

Unauthorized firmware upload via wwwupdate.cgi endpoint due to insufficient authorization. Remote attackers can upload and apply arbitrary firmware updates.

Earlier versions of this analysis (1)

v1 Mar 12, 2026 - 21:56 CVSS 9.1

Unauthorized firmware upload via web interface.

RemediationAI

Apply vendor patch. Restrict management access.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

CWE-862 missing authorization on firmware update endpoint. Attackers can push arbitrary firmware.

Know when Universal Bacnet Router Firmware gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

DescriptionCVE.org

Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupdate.cgi endpoint to upload and apply arbitrary updates.

Executive ViewAI

Why It Matters

A critical remote code execution vulnerability in wwwupdate.cgi allows unauthenticated attackers to upload and execute arbitrary updates on affected systems, potentially compromising complete system integrity and enabling lateral network movement. Organizations running vulnerable versions face immediate risk of breach, data theft, and operational disruption until mitigation is deployed.

Business Impact: Severe

Compensating Controls

Implement WAF rules blocking POST requests to wwwupdate.cgi from untrusted sources; restrict network access to wwwupdate.cgi via firewall/segmentation (administrative networks only); disable update functionality at the application level if business operations permit; enforce multi-factor authentication and strong IP whitelisting for any administrative access; enable enhanced logging and alerting on this endpoint; consider air-gapping critical systems until patch availability.

Threat Intelligence Overview

EPSS Score

0.1%

Top 72% exploitable

Data Quality

3 sources

Confidence: Low

NVD

CVE.org

EPSS

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity CRITICAL

CISA KEV No

Public POC No

EPSS 0.1%

Patch available No

Active threat No

Deciding rule

CRITICAL severity

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.