CVE-2025-41753

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description An issue exists where the object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. This allows an unauthenticated remote attacker to use relative paths to traverse outside the intended directory, enabling the reading or overwriting of arbitrary files on the device, which could lead to full system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.