Approved changes feed: RSS · Atom

cpe:2.3:a:sgai:space1_nas_n1211ds:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSgai (8c48f43b-8cc6-5aed-b2b3-951a59454378)
ProductSpace1 Nas N1211Ds (d68ac5dc-38c9-5103-8397-6fc0edfb6d32)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-14184 vulnerable 2026-06-08 07:06:33.812105 SGAI Space1 NAS N1211DS gsaiagent JSONAPI NGNIX_UPLOAD command injection
MEDIUM (6.3)
A vulnerability was determined in SGAI Space1 NAS N1211DS up to 1.0.915. Impacted is the function RENAME_FILE/OPERATE_FILE/NGNIX_UPLOAD of the file /cgi-bin/JSONAPI of the component gsaiagent. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-07T04:32:06.296Z
Updated: 2025-12-08T17:13:07.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14183 vulnerable 2026-06-08 07:06:33.811586 SGAI Space1 NAS N1211DS gsaiagent JSONAPI GET_USER_INFO credentials storage
MEDIUM (4.3)
A vulnerability was found in SGAI Space1 NAS N1211DS up to 1.0.915. This issue affects the function GET_FACTORY_INFO/GET_USER_INFO of the file /cgi-bin/JSONAPI of the component gsaiagent. The manipulation results in unprotected storage of credentials. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-07T03:02:05.975Z
Updated: 2025-12-08T17:13:15.862Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.