Filtered by vendor Mbs-solutions
Subscriptions
Total
36 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-75162 | 1 Mbs-solutions | 1 X-serie Gateway | 2026-09-10 | 6.5 Medium |
| An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows any remote authenticated user, including users with the low-privileged Standard role, to retrieve the configured OPC-UA authentication credentials in cleartext via the JSON API response. | ||||
| CVE-2026-75166 | 1 Mbs-solutions | 1 X-serie Gateway | 2026-09-10 | 8.8 High |
| Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password. By leveraging the tcpdump -z option, an authenticated attacker can achieve arbitrary command execution. | ||||
| CVE-2026-75161 | 1 Mbs-solutions | 1 X-serie Gateway | 2026-09-10 | 8.8 High |
| An issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to inject arbitrary code into the dpcheck system utility executed as root. | ||||
| CVE-2026-75165 | 1 Mbs-solutions | 1 X-serie Gateway | 2026-09-10 | 6.5 Medium |
| An issue in /cgi-bin/wwwugw.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to invoke hidden network diagnostic methods (ugw-ping, ugw-traceroute) that are not exposed in the web UI, allowing attackers to obtain sensitive information. | ||||
| CVE-2026-75169 | 1 Mbs-solutions | 1 X-serie Gateway | 2026-09-10 | 8.8 High |
| An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with Admin role to upload files with arbitrary content to hardcoded paths. | ||||
| CVE-2026-75160 | 1 Mbs-solutions | 1 X-serie Gateway | 2026-09-07 | 9.1 Critical |
| An issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. | ||||
| CVE-2026-75163 | 1 Mbs-solutions | 1 X-serie Gateway | 2026-09-07 | 6.5 Medium |
| An information disclosure vulnerability in the ugw-deviceinfo method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 returns detailed system version fields (operatingsystem, gatewayversion) to any authenticated user, including users with the low-privileged Standard role. | ||||
| CVE-2026-75168 | 1 Mbs-solutions | 1 X-serie Gateway | 2026-09-07 | 6.3 Medium |
| An issue in the ugw-editfile method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to write arbitrary content to files within /uxx/config/ and /ugw/config/. | ||||
| CVE-2026-75164 | 1 Mbs-solutions | 1 X-serie Gateway | 2026-09-07 | 6.5 Medium |
| An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to retrieve arbitrary files from the device filesystem via the file query string parameter. | ||||
| CVE-2026-75167 | 1 Mbs-solutions | 1 X-serie Gateway | 2026-09-07 | N/A |
| A broken access control vulnerability in the ugw-usr-edit method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to change the password of arbitrary accounts. | ||||
| CVE-2026-35075 | 2 Mbs, Mbs-solutions | 37 Double A Profibus Firmware, Double A X Link Firmware, Double X Can Firmware and 34 more | 2026-06-08 | 9.8 Critical |
| An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices. | ||||
| CVE-2026-35076 | 2 Mbs, Mbs-solutions | 37 Double A Profibus Firmware, Double A X Link Firmware, Double X Can Firmware and 34 more | 2026-06-08 | 8.1 High |
| The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. | ||||
| CVE-2026-35077 | 2 Mbs, Mbs-solutions | 37 Double A Profibus Firmware, Double A X Link Firmware, Double X Can Firmware and 34 more | 2026-06-08 | 8.1 High |
| The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. | ||||
| CVE-2026-35078 | 2 Mbs, Mbs-solutions | 55 Double-a Profibus, Double-a X-link, Double-x Can and 52 more | 2026-06-08 | 8.1 High |
| The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. | ||||
| CVE-2026-35079 | 2 Mbs, Mbs-solutions | 55 Double-a Profibus, Double-a X-link, Double-x Can and 52 more | 2026-06-08 | 8.1 High |
| The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. | ||||
| CVE-2026-35080 | 2 Mbs, Mbs-solutions | 55 Double-a Profibus, Double-a X-link, Double-x Can and 52 more | 2026-06-08 | 8.1 High |
| The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input. | ||||
| CVE-2026-35081 | 2 Mbs, Mbs-solutions | 55 Double-a Profibus, Double-a X-link, Double-x Can and 52 more | 2026-06-08 | 8.1 High |
| The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input. | ||||
| CVE-2026-35082 | 2 Mbs, Mbs-solutions | 55 Double-a Profibus, Double-a X-link, Double-x Can and 52 more | 2026-06-08 | 8.8 High |
| The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input. | ||||
| CVE-2026-35083 | 2 Mbs, Mbs-solutions | 37 Double A Profibus Firmware, Double A X Link Firmware, Double X Can Firmware and 34 more | 2026-06-08 | 8.8 High |
| A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root. | ||||
| CVE-2026-35084 | 2 Mbs, Mbs-solutions | 55 Double-a Profibus, Double-a X-link, Double-x Can and 52 more | 2026-06-08 | 8.8 High |
| A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root. | ||||