CVE-2025-27567

Name of the Vulnerable Software and Affected Versions HGW-BL1500HM versions 002.002.003 and earlier

Description A cross-site scripting issue exists in the NickName registration screen. This could allow an arbitrary script to be executed on the user's web browser when using the configuration page or functions accessible from the LAN side of the product.

Recommendations For HGW-BL1500HM versions 002.002.003 and earlier, consider restricting access to the NickName registration screen until a fix is available. As a temporary workaround, avoid using the NickName registration feature to minimize the risk of exploitation.