CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. Its EPSS score suggests a 15.9% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2022-31793
Severity
HIGH
CVSS
7.5
EPSS
15.85%
Original NVD Description
do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.
Related CVEs
Other vulnerabilities affecting the same vendor(s)