PT-2025-13453 · Unknown · Hgw-Bl1500Hm

Published 2025-03-28 · Updated 2025-03-28 · CVE-2025-27932

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions HGW-BL1500HM versions 002.002.003 and earlier

Description The issue is related to improper limitation of a pathname to a restricted directory, also known as 'Path Traversal', in the file deletion process of the USB storage file-sharing function. This could allow an attacker to delete a file on the device or cause a denial of service (DoS) condition.

Recommendations For HGW-BL1500HM versions 002.002.003 and earlier, consider disabling the USB storage file-sharing function until a patch is available to prevent potential exploitation. Restrict access to the file deletion process to minimize the risk of unauthorized file deletion or denial of service.

Fix

DoS

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-27932

Affected Products

Hgw-Bl1500Hm

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-27932 · Security Note
• https://jvn.jp/en/jp/JVN04278547 · Note
• https://t.me/cvetracker/20158 · Telegram Post
• https://twitter.com/CVEnew/status/1905674406942400937 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1905559411952668721 · Twitter Post
• https://t.me/cvedetector/21388 · Telegram Post
• https://kddi-tech.com/contents/appendix_L2_06.html#64433e4a-8946-9c06-bddf-91cbfe56c8e5 · Note