Approved changes feed: RSS · Atom

cpe:2.3:a:kddi_corporation:hgw-bl1500hm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKddi Corporation (c55f60ae-7c0a-547e-8604-3cfea49377cb)
ProductHgw Bl1500Hm (2265e7d5-8be9-5924-b0f8-3365702090ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27932 vulnerable 2026-06-08 07:14:55.896679 Details available
HIGH (8.1)
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file deletion process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an attacker may delete a file on the device or cause a denial of service (DoS) condition.
Published: 2025-03-28T08:19:01.846Z
Updated: 2025-03-28T13:55:44.769Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27726 vulnerable 2026-06-08 07:14:55.488329 Details available
LOW (2.1)
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file download process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered by a crafted HTTP request to specific functions of the product from a device connected to the LAN side.
Published: 2025-03-28T08:18:49.092Z
Updated: 2025-03-28T13:56:09.518Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27718 vulnerable 2026-06-08 07:14:55.473192 Details available
HIGH (8.8)
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file upload process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered or arbitrary code may be executed by a crafted HTTP request to specific functions of the product from a device connected to the LAN side.
Published: 2025-03-28T08:18:36.814Z
Updated: 2025-03-28T13:56:31.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27716 vulnerable 2026-06-08 07:14:55.471133 Details available
MEDIUM (6.5)
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file/folder listing process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered by a crafted HTTP request to specific functions of the product from a device connected to the LAN side.
Published: 2025-03-28T08:18:23.782Z
Updated: 2025-03-28T13:56:59.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27574 vulnerable 2026-06-08 07:14:55.333510 Details available
LOW (3.6)
Cross-site scripting vulnerability exists in the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only from the LAN side of the product.
Published: 2025-03-28T08:18:11.469Z
Updated: 2025-03-28T13:57:52.244Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27567 vulnerable 2026-06-08 07:14:55.330972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.