Skip to content
OpenAdvisories
Medium · 4.9 CVE-2025-41759 EUVD-2025-208364GHSA-rmhq-3pj8-86qj

Use of wildcard (“*” or “all”) in Block list

Published Mar 9, 2026 · Updated Mar 9, 2026 · Assigned by CERTVDE

Description

An administrator may attempt to block all networks by specifying "\*" or "all" as the network identifier. However, these values are not supported and do not trigger any validation error. Instead, they are silently interpreted as network 0 which results in no networks being blocked at all.

Affected products

VendorProductAffectedFixed
MBS UBR-01 Mk II 0.0.0 – < 6.0.1.0 6.0.1.0
MBS UBR-02 0.0.0 – < 6.0.1.0 6.0.1.0
MBS UBR-LON 0.0.0 – < 6.0.1.0 6.0.1.0

References