CVE-2026-35076

Опубликовано: 03 июн. 2026

Источник: nvd

CVSS3: 8.1

EPSS Низкий

Описание

The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

Ссылки

https://www.certvde.com/en/advisories/VDE-2026-039/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:mbs-solutions:universal_gateway_firmware:*:*:*:*:*:*:*:*

Версия до 6_00_07 (исключая)

Одно из

cpe:2.3:h:mbs-solutions:double-a_profibus:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:double-a_x-link:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:double-x_can:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:double-x_dali:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:double-x_knx:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:double-x_lon:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:double-x_m-bus:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:double-x_profinet:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:double-x_x-link:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:single-a:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:single-x:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:triple-x_knx\+dali:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:triple-x_knx\+lon:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:triple-x_knx\+m-bus:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:triple-x_profinet\+dali:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:triple-x_profinet\+knx:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:triple-x_profinet\+lon:-:*:*:*:*:*:*:*

cpe:2.3:h:mbs-solutions:triple-x_profinet\+m-bus:-:*:*:*:*:*:*:*

EPSS

Процентиль: 30%

0.0037

Низкий

8.1 High

CVSS3

Дефекты

CWE-73

Связанные уязвимости

GHSA-xhgx-4832-crrx