Approved changes feed: RSS · Atom

cpe:2.3:a:ugreen:dh2100+:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUgreen (afd17a50-36f3-5320-8b75-b46012590655)
ProductDh2100+ (a3c14059-23b0-56f4-a72a-3408c82ce6c5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-14693 vulnerable 2026-06-08 07:06:34.965790 Ugreen DH2100+ USB symlink
MEDIUM (6.2)
A vulnerability has been found in Ugreen DH2100+ up to 5.3.0. This affects an unknown function of the component USB Handler. Such manipulation leads to symlink following. The attack can be executed directly on the physical device. The exploit has been disclosed to the public and may be used. It is suggested to upgrade the affected component.
Published: 2025-12-15T00:02:06.966Z
Updated: 2026-01-28T06:49:07.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14188 vulnerable 2026-06-08 07:06:33.826306 UGREEN DH2100+ nas_svr create handler_file_backup_create command injection
HIGH (7.2)
A security vulnerability has been detected in UGREEN DH2100+ up to 5.3.0.251125. This impacts the function handler_file_backup_create of the file /v1/file/backup/create of the component nas_svr. The manipulation of the argument path leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Upgrading the affected component is advised.
Published: 2025-12-07T11:02:05.449Z
Updated: 2026-01-28T06:48:58.591Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14187 vulnerable 2026-06-08 07:06:33.825805 UGREEN DH2100+ nas_svr create handler_file_backup_create buffer overflow
HIGH (7.2)
A weakness has been identified in UGREEN DH2100+ up to 5.3.0.251125. This affects the function handler_file_backup_create of the file /v1/file/backup/create of the component nas_svr. Executing a manipulation of the argument path can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. It is recommended to upgrade the affected component.
Published: 2025-12-07T08:32:07.027Z
Updated: 2026-01-28T06:48:53.137Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.