CVE-2025-27932

Publication date

2025-03-28 08:19:01

Family

jpcert

State

PUBLISHED

Description

Improper limitation of a pathname to a restricted directory (Path Traversal) issue exists in the file deletion process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an attacker may delete a file on the device or cause a denial of service (DoS) condition.