Vulnerability · Published Aug 4, 2022 · Assigned by mitre
CVE-2022-31793
High 7.5
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 17.7% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)17.7%top 2.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling2Nuclei, Public PoC
Official description
do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.
Affected products (as reported)
References
- http://inglorion.net/software/muhttpd/ x_refsource_MISC
- https://kb.cert.org/vuls/id/495801 x_refsource_MISC
- https://derekabdine.com/blog/2022-arris-advisory x_refsource_MISC
- https://blog.malwarebytes.com/exploits-and-vulnerabilities/2022/08/millions-of-arris-routers-are-vulnerable-to-path-traversal-attacks/ x_refsource_MISC
- https://www.kb.cert.org/vuls/id/495801