CVE-2022-37681: Hitachi Hc-IP9100HD Firmware

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Hitachi Kokusai Electric Newtork products for monitoring system (Camera, Decoder and Encoder) and below allows attckers to perform a directory traversal via a crafted GET request to the endpoint /ptippage.cgi. Security information ID hitachi-sec-2022-001 contains fixes for the issue.

Affected products

• Hitachi Hc-IP9100HD Firmware: up to and including 1.07

Published 2022-08-29. Last modified 2026-06-17.