Directory Traversal Vulnerability in Hitachi Kokusai Electric Network Monitoring Products

CVE-2022-37681

What is CVE-2022-37681?

A directory traversal vulnerability exists in Hitachi Kokusai Electric's network monitoring products, including Cameras, Decoders, and Encoders. Attackers can exploit this vulnerability to access restricted directories by crafting a malicious GET request directed at the endpoint /ptippage.cgi. This could potentially lead to unauthorized access to sensitive system files. A security advisory (hitachi-sec-2022-001) has been issued, providing guidance on the necessary patches to mitigate the risks associated with this vulnerability.

References