CVE-2025-41753

Summary

This flaw allows an unauthenticated remote attacker to read or overwrite arbitrary files on the device by exploiting improperly validated file paths in BACnet File Objects, leading to potential full system compromise.

Exploitability

Exploitation is relatively straightforward as it requires no authentication and can be carried out by traversing outside the intended directory path.

Blast radius

If exploited, this vulnerability could result in full system compromise, allowing an attacker to gain complete control over the device and potentially the entire network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected BACnet File Object feature or restrict access to the named endpoint to prevent unauthorized file operations.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.