EUVD-2026-71455
GHSA-qqg2-xvr7-83hv
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Unauthenticated network requests to CGI endpoints (AV:N/AC:L/PR:N/UI:N) grant admin-level config read/write (C:H/I:H) with no availability impact (A:N), matching the priv-esc nature.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
5DescriptionCVE.org
An issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi.
AnalysisAI
Privilege escalation in MBS-solutions X-Serie Gateway firmware V6_00_05 allows a remote attacker to gain elevated privileges by abusing two CGI endpoints, /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. Per the CVSS vector the attack requires no authentication (PR:N) and yields high confidentiality and integrity impact, effectively granting an attacker administrative control over the gateway's configuration and data. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network access to the X-Serie Gateway's web management interface and the ability to send HTTP requests to the two named CGI endpoints (/cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi); per the CVSS vector no authentication (PR:N), no user interaction (UI:N), and low complexity (AC:L) are needed against firmware V6_00_05. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 9.1 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:N) signals a serious, network-reachable, unauthenticated flaw with high confidentiality and integrity impact but explicitly no availability impact - consistent with a privilege-escalation/config-access weakness rather than a crash or DoS. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch version is identified in the available data, so the primary recommendation is to contact MBS-solutions for a fixed firmware release and confirm whether a version later than V6_00_05 addresses the flaw before deploying. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, immediately audit your infrastructure to identify all instances of MBS-solutions X-Serie Gateway running firmware version V6_00_05 and restrict or disable external network access to these devices. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today