CVE-2021-44124 in HiBy OS

Riassunto

di MITRE • 28/03/2022

Hiby Music Hiby OS R3 Pro 1.5 and 1.6 is vulnerable to Directory Traversal. The HTTP Server does not have enough input data sanitization when shown data from SD Card, an attacker can navigate through the device's File System over HTTP.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 22/11/2021
• Divulgazione: 28/03/2022
• Moderazione: accettato
• Voce: VDB-195976
• CPE: pronto
• CWE: CWE-21 (confermato)
• CVSS: 5.5 (VulDB)
• EPSS: 0.01858
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-44124
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-44124
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-44124/