GCVE - cpe:2.3:o:sgwbox:n3_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:sgwbox:n3_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Sgwbox (`6a1c72c9-713e-57a0-96be-557024e7bef7`)
Product	N3 Firmware (`c0f3a439-d4a2-5379-ac5a-824473f1a03d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-14709`	vulnerable	2026-06-08 07:06:34.988517	Shiguangwu sgwbox N3 WIRELESSCFGGET http_eshell_server buffer overflow CRITICAL (9.8) A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue is some unknown functionality of the file /usr/sbin/http_eshell_server of the component WIRELESSCFGGET Interface. The manipulation of the argument params leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-12-15T07:02:07.039Z Updated: 2025-12-15T17:33:08.135Z Open on db.gcve.eu Reference links https://vuldb.com/?id.336426 https://vuldb.com/?ctiid.336426 https://vuldb.com/?submit.706989 https://www.notion.so/sgwbox-NAS-N3-Buffer-Overflow-2be6cf4e528a80258b82dee0d6d1ebd1?source=copy_link	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14708`	vulnerable	2026-06-08 07:06:34.987914	Shiguangwu sgwbox N3 WIREDCFGGET http_eshell_server buffer overflow CRITICAL (9.8) A weakness has been identified in Shiguangwu sgwbox N3 2.0.25. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/http_eshell_server of the component WIREDCFGGET Interface. Executing manipulation of the argument params can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-12-15T06:32:06.485Z Updated: 2025-12-15T15:55:33.827Z Open on db.gcve.eu Reference links https://vuldb.com/?id.336425 https://vuldb.com/?ctiid.336425 https://vuldb.com/?submit.706977 https://www.notion.so/sgwbox-NAS-N3-Buffer-Overflow-2be6cf4e528a808b9f71fe434929c73b?source=copy_link	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14707`	vulnerable	2026-06-08 07:06:34.982185	Shiguangwu sgwbox N3 DOCKER Feature http_eshell_server command injection CRITICAL (9.8) A security flaw has been discovered in Shiguangwu sgwbox N3 2.0.25. Affected is an unknown function of the file /usr/sbin/http_eshell_server of the component DOCKER Feature. Performing manipulation of the argument params results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-12-15T06:02:06.636Z Updated: 2025-12-15T16:00:21.264Z Open on db.gcve.eu Reference links https://vuldb.com/?id.336424 https://vuldb.com/?ctiid.336424 https://vuldb.com/?submit.706976 https://www.notion.so/sgwbox-NAS-N3-Command-Injection-2be6cf4e528a805f9b94f7b8799c77a8?source=copy_link	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14706`	vulnerable	2026-06-08 07:06:34.981552	Shiguangwu sgwbox N3 NETREBOOT http_eshell_server command injection CRITICAL (9.8) A vulnerability was identified in Shiguangwu sgwbox N3 2.0.25. This impacts an unknown function of the file /usr/sbin/http_eshell_server of the component NETREBOOT Interface. Such manipulation leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-12-15T05:32:05.553Z Updated: 2025-12-15T18:00:55.566Z Open on db.gcve.eu Reference links https://vuldb.com/?id.336423 https://vuldb.com/?ctiid.336423 https://vuldb.com/?submit.706975 https://www.notion.so/sgwbox-NAS-N3-Command-Injection-2be6cf4e528a807cb619f9d2e1bcda20?source=copy_link	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14705`	vulnerable	2026-06-08 07:06:34.981181	Shiguangwu sgwbox N3 SHARESERVER Feature command injection CRITICAL (9.8) A vulnerability was determined in Shiguangwu sgwbox N3 2.0.25. This affects an unknown function of the component SHARESERVER Feature. This manipulation of the argument params causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-12-15T05:02:06.394Z Updated: 2025-12-15T18:04:49.608Z Open on db.gcve.eu Reference links https://vuldb.com/?id.336422 https://vuldb.com/?ctiid.336422 https://vuldb.com/?submit.706974 https://www.notion.so/sgwbox-NAS-N3-Command-Injection-2be6cf4e528a80d69da5d6d17456a183?source=copy_link	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14704`	vulnerable	2026-06-08 07:06:34.980675	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14703`	vulnerable	2026-06-08 07:06:34.979515	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.