{"vulnerability": "CVE-2022-31793", "sightings": [{"uuid": "70a227f4-3017-4489-9100-49847c3627db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-20)", "content": "", "creation_timestamp": "2025-04-20T00:00:00.000000Z"}, {"uuid": "0549ced6-4a19-4141-90fa-983eb28568e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/1514", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31793\nGithub: https://github.com/xpgdgit/CVE-2022-31793\nDescribe: \ndo_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.", "creation_timestamp": "2026-08-02T00:01:15.474103Z"}, {"uuid": "6b7340ff-1cc0-4fc3-b473-d41e4e53010e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/1514", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31793\nGithub: https://github.com/xpgdgit/CVE-2022-31793\nDescribe: \ndo_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.", "creation_timestamp": "2026-08-01T05:00:05.132275Z"}, {"uuid": "b6a32415-3b78-470c-8554-0dacb3c8f37c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/05c68957-3684-432f-b134-714c8bc8030f", "content": "", "creation_timestamp": "2026-06-23T14:06:15.129839Z"}, {"uuid": "58f1ae04-bbc5-461e-9f49-5a6a06b4492f", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-31793", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64f5e9eb-8832-4ada-ad56-e69af5a00e3d", "content": "", "creation_timestamp": "2026-06-30T09:59:27.201243Z"}, {"uuid": "cb040ff0-68a3-496e-950c-47599735cb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "seen", "source": "https://t.me/CVEhub/1514", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31793\nGithub: https://github.com/xpgdgit/CVE-2022-31793\nDescribe: \ndo_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.", "creation_timestamp": "2026-07-29T12:01:02.521059Z"}, {"uuid": "57212cbc-d094-4957-aef7-f12a2997c78e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "seen", "source": "https://t.me/CVEhub/1514", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31793\nGithub: https://github.com/xpgdgit/CVE-2022-31793\nDescribe: \ndo_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.", "creation_timestamp": "2026-07-30T00:01:43.381850Z"}]}