← All advisories

Critical severity9.8NVD Advisory· Published Jul 29, 2022· Updated Jun 17, 2026

CVE-2022-34496

CVE-2022-34496

Description

Hiby R3 PRO firmware v1.5 to v1.7 was discovered to contain a file upload vulnerability via the file upload feature.

Affected products

4

Hiby/R3 Pro Firmwarecpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- cpe:2.3:o:hiby:hiby_r3_pro_firmware:*:*:*:*:*:*:*:*range: >=1.5,<=1.7
Hiby/Hiby R3 Pro Saber Firmware
cpe:2.3:o:hiby:hiby_r3_pro_saber_firmware:*:*:*:*:*:*:*:*
Range: >=1.5,<=1.7
Hiby/R3 PROllm-create
Range: v1.5 to v1.7

Patches

Vulnerability mechanics

References

2

github.com/feric/Findings/tree/main/Hiby/Web%20Server/File%20uploadingnvdExploitThird Party Advisory
github.com/vext01/hiby-issues/issues/52nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.