Path traversal in Hitachi Kokusai Electric products - CVE-2022-37681

Vulnerability identifier: #VU69265

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-37681

CWE-ID: CWE-22

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences. A remote attacker can send a specially crafted HTTP request and read arbitrary files on the system.

HC-IP1005HD
HC-IP1200HD
HC-IP6000HDP
KV-H551HD
HC-IP250HDA
HC-IP41HD
HC-IP3100HDA
HC-IP3050HD
HC-IP9100HD
KP-IP1020HD
HC-IP3100HD
HC-IP9050HD
HC-IP3050HDA
KV-H551HDA
HC-IP277HD
HC-IP267HD
HC-IP400HD
VG-IP2000
PT-IP1900T
PT-IP2500R

Install update from vendor's website.

HC-IP1005HD - update to 1.02
HC-IP1200HD - update to 1.02
HC-IP6000HDP - update to 1.02
KV-H551HD - update to 1.02
HC-IP250HDA - update to 1.03
HC-IP41HD - update to 1.04
HC-IP3100HDA - update to 1.06
HC-IP3050HD - update to 1.06
HC-IP9100HD - update to 1.08
VG-IP2000 - update to 1.09
KP-IP1020HD - update to 1.13
HC-IP3100HD - update to 1.15
HC-IP9050HD - update to 1.21
HC-IP3050HDA - update to 2.05
KV-H551HDA - update to 2.05
HC-IP277HD - update to 2.05
HC-IP267HD - update to 2.05
HC-IP400HD - update to 2.08
PT-IP1900T - update to 2.21
PT-IP2500R - update to 3.04

• https://gist.github.com/Nwqda/5efea18c9142c6a966d85c6be2c0c2b5
• https://www.hitachi-kokusai.co.jp/global/en/products/camera/network/index.html

• Multiple vulnerabilities in Hitachi Kokusai Network products for monitoring system(Camera, Encoder, Decoder)