CVE-2026-75166

Deferred Deferred - Pending Action

Insecure Permission in MBS-Solutions X-Serie Gateway Firmware

Publication date: 2026-09-04

Last updated on: 2026-09-09

Assigner: MITRE

Description

Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password. By leveraging the tcpdump -z option, an authenticated attacker can achieve arbitrary command execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-04

Last Modified

2026-09-09

Generated

2026-09-25

AI Q&A

2026-09-04

EPSS Evaluated

2026-09-23

NVD

CVE-2026-75166

EUVD

EUVD-2026-71447

Affected Vendors & Products

Vendor	Product	Version / Range
mbs-solutions	x-serie_gateway	6_00_05

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-276	During installation, installed file permissions are set to allow anyone to modify those files.
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability is an insecure permission issue in MBS-Solutions X-Serie Gateway firmware version V6_00_05. It allows a low-privileged service user to run the tcpdump tool as root without requiring a password. By using the tcpdump -z option, an authenticated attacker can execute arbitrary commands on the system.

Detection Guidance

To detect this vulnerability, check if the low-privileged service user has permissions to execute /usr/bin/tcpdump without a password. Use commands like 'sudo -l' to list sudo permissions for the user. If /usr/bin/tcpdump appears without a password requirement, the system is vulnerable.

Impact Analysis

An attacker with low-level access could escalate privileges to root, execute malicious commands, and potentially take full control of the affected device. This could lead to data theft, system compromise, or disruption of services.

Compliance Impact

This vulnerability allows low-privileged users to execute commands as root, enabling arbitrary command execution. This could lead to unauthorized access to sensitive data, system compromise, or data exfiltration, which would violate compliance requirements under GDPR (data protection) and HIPAA (patient data security).

Mitigation Strategies

Immediately update the MBS-Solutions X-Serie Gateway firmware to the latest version to remove the insecure permission configuration. Restrict access to the service user account and audit all accounts with elevated privileges.

Hi! I’m here to help you understand CVE-2026-75166. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70