What’s Vulnerable › Vulnerabilities

CVE-2022-31793

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 17.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-08-04 · updated 2026-06-17
• Weakness: CWE-22

Description

do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.

Affected products

• Arris Bgw210 Firmware: all versions
• Arris Bgw320 Firmware: all versions
• Arris Nvg443 Firmware: all versions
• Arris Nvg510 Firmware: all versions
• Arris Nvg589 Firmware: all versions
• Arris Nvg599 Firmware: all versions
• Inglorion Muhttpd: before 1.1.7 — fixed in 1.1.7

How to fix

Upgrade to a fixed version: Inglorion Muhttpd 1.1.7. Check the vendor advisory for mitigations.

References

• http://inglorion.net/software/muhttpd/
• https://blog.malwarebytes.com/exploits-and-vulnerabilities/2022/08/millions-of-arris-routers-are-vulnerable-to-path-traversal-attacks/
• https://derekabdine.com/blog/2022-arris-advisory
• https://kb.cert.org/vuls/id/495801
• http://inglorion.net/software/muhttpd/
• https://blog.malwarebytes.com/exploits-and-vulnerabilities/2022/08/millions-of-arris-routers-are-vulnerable-to-path-traversal-attacks/
• https://derekabdine.com/blog/2022-arris-advisory
• https://kb.cert.org/vuls/id/495801
• https://www.kb.cert.org/vuls/id/495801

Get alerted when CVE-2022-31793 or the next vulnerability affects your stack