Hitachi Kokusai Electric Newtork products for monitoring system (Camera, Decoder and Encoder) and below allows attckers to perform a directory traversal via a crafted GET request to the endpoint /ptippage.cgi. Security information ID hitachi-sec-2022-001 contains fixes for the issue.
2022-08-29T23:15:08.733
2024-11-21T07:15:04.670
Modified
CVSSv3.1: 7.5 (HIGH)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | hitachi | hc-ip9100hd_firmware | ≤ 1.07 | Yes |
Hardware | hitachi | hc-ip9100hd | - | No |