CNNVD-202512-2715 Information

CNNVD ID

CNNVD-202512-2715

CVE-2025-14708

  • CNNVD Published: 2025-12-15

Description (Chinese)

SGWBox N3是中国拾光坞(SGWBox)公司的一个网络存储设备。 SGWBox N3 2.0.25版本存在安全漏洞,该漏洞源于对文件/usr/sbin/http_eshell_server中参数params的错误操作,可能导致缓冲区溢出。

Description (English)

SGWBox N3 is a network storage facility for the China Gingerwood Company. There is a security loophole in version SGWBox N3 2.0.25, which stems from the erroneous operation of paraams of the parameters in the document/usr/sbin/http eshell server, which could lead to spills in the buffer zone.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

拾光坞

Published

2025-12-15

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.336425 https://vuldb.com/?id.336425 https://vuldb.com/?submit.706977 https://www.notion.so/sgwbox-NAS-N3-Buffer-Overflow-2be6cf4e528a808b9f71fe434929c73b?source=copy_link

Share on: