CVE-2025-27716

Name of the Vulnerable Software and Affected Versions HGW-BL1500HM versions prior to 002.002.003

Description A Path Traversal issue exists in the file/folder listing process of the USB storage file-sharing function. This issue can be exploited by sending a crafted HTTP request to specific functions of the product from a device connected to the LAN side, potentially allowing an attacker to obtain and/or alter the product's files.

Recommendations For versions prior to 002.002.003, update to a version 002.002.003 or later to resolve the issue. As a temporary workaround, consider restricting access to the USB storage file-sharing function until a patch is available.