CyberRota Analysis
AI-GeneratedThe MBS-Solutions X-Serie Gateway firmware contains a vulnerability that allows remote authenticated users with low-privileged Standard roles to access hidden network diagnostic methods, such as ugw-ping and ugw-traceroute, which are not visible in the web interface. This exposure can lead to the unauthorized retrieval of sensitive information, potentially compromising network security. Organizations using this firmware should prioritize remediation to mitigate the risk of information leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An issue in /cgi-bin/wwwugw.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to invoke hidden network diagnostic methods (ugw-ping, ugw-traceroute) that are not exposed in the web UI, allowing attackers to obtain sensitive information.