Back to Database
Status published
Low
CVE-2025-27574
Cross-site scripting vulnerability exists in the USB storage file-sharing function...
Vulnerability Description
Cross-site scripting vulnerability exists in the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only from the LAN side of the product.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-27574
Credits & Attribution
No credits recorded in the NVD database.
References
More from KDDI CORPORATION
View All →CVE-2025-60022
Improper certificate validation vulnerability exists in 'デジラアプリ' App for iOS...
Low
2.3
CVE-2025-27932
Improper limitation of a pathname to a restricted directory ('Path...
High
8.1
CVE-2025-27726
Improper limitation of a pathname to a restricted directory ('Path...
Low
2.1
CVE-2025-27718
Improper limitation of a pathname to a restricted directory ('Path...
High
8.8
CVE-2025-27716
Improper limitation of a pathname to a restricted directory ('Path...
Medium
6.5
Affected Vendor
KDDI CORPORATION
View all reports →Affected Software
HGW-BL1500HM
Vulnerable Versions:
Ver 002.002.003 and earlier
Timeline
Official Publish:
March 28th, 2025
Last Modified:
March 28th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:P/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N