VulnerabilityAnalyzed
CVE-2025-14705
A vulnerability was determined in Shiguangwu sgwbox N3 2.0.25.
HIGH 8.9EPSS 16.5%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 16.5%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
A vulnerability was determined in Shiguangwu sgwbox N3 2.0.25. This affects an unknown function of the component SHARESERVER Feature. This manipulation of the argument params causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
- CVSS 4.0
- 8.9 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 16.50% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-74, CWE-77
- Affected
- sgwbox/n3 firmware
- Source
- cna@vuldb.com
References
- https://vuldb.com/?ctiid.336422Permissions Required, VDB Entry
- https://vuldb.com/?id.336422Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.706974Third Party Advisory, VDB Entry
- https://www.notion.so/sgwbox-NAS-N3-Command-Injection-2be6cf4e528a80d69da5d6d17456a183?source=copy_linkExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.