CyberRota Analysis
AI-GeneratedA broken access control vulnerability in the ugw-usr-edit method of MBS-Solutions X-Serie Gateway firmware allows remote authenticated users with low-privileged Standard roles to change passwords for arbitrary accounts. This could lead to unauthorized access and potential compromise of user accounts. Organizations using this firmware should prioritize remediation to prevent exploitation by malicious actors.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A broken access control vulnerability in the ugw-usr-edit method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to change the password of arbitrary accounts.