CVE-2025-41759

Use of wildcard (“*” or “all”) in Block list

State: Published
Severity: 4.9 Medium
Published: Mar 9, 2026
Updated: Mar 9, 2026
Reserved: Apr 16, 2025

Description

An administrator may attempt to block all networks by specifying "\*" or "all" as the network identifier. However, these values are not supported and do not trigger any validation error. Instead, they are silently interpreted as network 0 which results in no networks being blocked at all.

Scores

CVSS	Score	Vector	Source
3.1	4.9 Medium	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	CERTVDE

Weaknesses

CWE-636 Not Failing Securely ('Failing Open')

Affected Products

Product	Versions
UBR-01 Mk IIMBS	0.0.0 to before 6.0.1.0Affected
UBR-02MBS	0.0.0 to before 6.0.1.0Affected
UBR-LONMBS	0.0.0 to before 6.0.1.0Affected

References

https://www.mbs-solutions.de/mbs-2025-0001

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.