VulnerabilityDeferred
CVE-2025-14693
A vulnerability has been found in Ugreen DH2100+ up to 5.3.0.
MEDIUM 5.2EPSS 0.22%
Does this matter?
Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability has been found in Ugreen DH2100+ up to 5.3.0. This affects an unknown function of the component USB Handler. Such manipulation leads to symlink following. The attack can be executed directly on the physical device. The exploit has been disclosed to the public and may be used. It is suggested to upgrade the affected component.
- CVSS 4.0
- 5.2 MEDIUMCVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.22% probability · 13th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-59, CWE-61
- Source
- cna@vuldb.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.