Path Traversal Vulnerability in HGW-BL1500HM by KDDI
CVE-2025-27718

8.8HIGH

Key Information:

Vendor

Kddi Corporation

Status
Hgw-bl1500hm
Vendor
CVE Published:
28 March 2025

What is CVE-2025-27718?

A path traversal vulnerability has been identified in the USB storage file-sharing function of the HGW-BL1500HM device. This flaw allows attackers to manipulate file paths, potentially allowing unauthorized access to files or execution of arbitrary code through specially crafted HTTP requests from devices on the local area network (LAN). Users of the HGW-BL1500HM should take steps to secure their devices to prevent exploitation of this vulnerability.

Affected Version(s)

HGW-BL1500HM Ver 002.002.003 and earlier

References

https://kddi-tech.com/contents/appendix_L2_06.html#64433e...
https://jvn.jp/en/jp/JVN04278547/

CVSS V3.0

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.