CVE-2025-41759
Received Received - Intake
Improper Input Validation in Network Blocking Causes Bypass

Publication date: 2026-03-09

Last updated on: 2026-03-11

Assigner: CERT VDE

Description
An administrator may attempt to block all networks by specifying "\*" or "all" as the network identifier. However, these values are not supported and do not trigger any validation error. Instead, they are silently interpreted as network 0 which results in no networks being blocked at all.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-09
Last Modified
2026-03-11
Generated
2026-06-16
AI Q&A
2026-03-09
EPSS Evaluated
2026-06-15
NVD
CVE-2025-41759
EUVD
EUVD-2025-208364
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
mbs-solutions universal_bacnet_router_firmware to 6.0.1.0 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-636 When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Detection Guidance

I don't know

Mitigation Strategies

I don't know

Executive Summary

This vulnerability occurs when an administrator tries to block all networks by using the identifiers "*" or "all". These values are not supported and do not cause any validation errors. Instead, they are silently interpreted as network 0, which means that no networks are actually blocked.

Impact Analysis

Because the intended network blocking does not occur, an administrator's attempt to block all networks will fail silently. This can lead to unintended network access, potentially exposing systems or data to unauthorized network traffic.

Compliance Impact

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-41759. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart