Skip to content
OpenAdvisories
High · 8.1 CVE-2025-27932 EUVD-2025-8560GHSA-5752-jhh8-x4vc

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file deletion process of the USB storage…

Published Mar 28, 2025 · Updated Mar 28, 2025 · Assigned by jpcert

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file deletion process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an attacker may delete a file on the device or cause a denial of service (DoS) condition.

Affected products

VendorProductAffectedFixed
KDDI HGW-BL1500HM Ver 002.002.003 and earlier —

References