What is CVE-2021-44124?

CVE-2021-44124 is a high-severity vulnerability in Hiby R3 Pro, classified under Path Traversal. CVSS score: 7.5/10. Published 2022-03-28.

How severe is CVE-2021-44124?

High severity. CVSS v3 base score is 7.5 out of 10.

Path Traversal in Hiby R3 Pro

CVE-2021-44124

Hiby Music Hiby OS R3 Pro 1.5 and 1.6 is vulnerable to Directory Traversal. The HTTP Server does not have enough input data sanitization when shown data from SD Card, an attacker can navigate through the device's File System over HTTP.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.019 (77.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Hiby R3_pro
Hiby R3_pro_firmware — versions 1.5, 1.6
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-44124?: CVE-2021-44124 is a high-severity vulnerability in Hiby R3 Pro, classified under Path Traversal. CVSS score: 7.5/10. Published 2022-03-28.
How severe is CVE-2021-44124?: High severity. CVSS v3 base score is 7.5 out of 10.