CVE-2025-27932

Name of the Vulnerable Software and Affected Versions HGW-BL1500HM versions 002.002.003 and earlier

Description The issue is related to improper limitation of a pathname to a restricted directory, also known as 'Path Traversal', in the file deletion process of the USB storage file-sharing function. This could allow an attacker to delete a file on the device or cause a denial of service (DoS) condition.

Recommendations For HGW-BL1500HM versions 002.002.003 and earlier, consider disabling the USB storage file-sharing function until a patch is available to prevent potential exploitation. Restrict access to the file deletion process to minimize the risk of unauthorized file deletion or denial of service.