Vulnerability Details CVE-2021-44124
Hiby Music Hiby OS R3 Pro 1.5 and 1.6 is vulnerable to Directory Traversal. The HTTP Server does not have enough input data sanitization when shown data from SD Card, an attacker can navigate through the device's File System over HTTP.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2021-44124
-
cpe:2.3:h:hiby:r3_pro:-
-
cpe:2.3:o:hiby:r3_pro_firmware:1.5
-
cpe:2.3:o:hiby:r3_pro_firmware:1.6