Skip to content
OpenAdvisories
Medium · 4.9 CVE-2025-41760 EUVD-2025-208366GHSA-vjr8-6jjg-p3hj

Pass filter with Empty Table

Published Mar 9, 2026 · Updated Mar 9, 2026 · Assigned by CERTVDE

Description

An administrator may attempt to block all traffic by configuring a pass filter with an empty table. However, in UBR, an empty list does not enforce any restrictions and allows all network traffic to pass unfiltered.

Affected products

VendorProductAffectedFixed
MBS UBR-01 Mk II 0.0.0 – < 6.0.1.0 6.0.1.0
MBS UBR-02 0.0.0 – < 6.0.1.0 6.0.1.0
MBS UBR-LON 0.0.0 – < 6.0.1.0 6.0.1.0

References