PT-2025-49316 · Unknown · Zspace Q2C Nas

Renguangyue · Published 2025-12-05 · Updated 2025-12-16 · CVE-2025-14106

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ZSPACE Q2C NAS versions up to 1.1.0210050

Description A command injection issue exists in ZSPACE Q2C NAS. The issue is related to the manipulation of the safe dir argument within the zfilev2 api.CloseSafe function, located in the /v2/file/safe/close file of the HTTP POST Request Handler component. This allows for remote execution of commands. The exploit is publicly available.

Recommendations Versions prior to 1.1.0210050 should be updated. As a temporary workaround, consider restricting access to the /v2/file/safe/close endpoint to minimize the risk of exploitation.

Exploit

Fix

Command Injection

Special Elements Injection

Weakness Enumeration

CWE-77

CWE-74

Related Identifiers

CVE-2025-14106

Affected Products

Zspace Q2C Nas

References · 12

• 🔥 https://notion.so/2af6cf4e528a80bab847dcc1fb677590 · Exploit
• https://osv.dev/vulnerability/CVE-2025-14106 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14106 · Security Note
• https://twitter.com/CveFindCom/status/1997073333871878503 · Twitter Post
• https://t.me/cveNotify/145591 · Telegram Post
• https://vuldb.com/?id.334488 · Note
• https://twitter.com/VulmonFeeds/status/1997084246381343175 · Twitter Post
• https://vuldb.com/?submit.697141 · Note
• https://t.me/cveNotify/145907 · Telegram Post
• https://twitter.com/CVEnew/status/1997059575715930425 · Twitter Post
• https://vuldb.com/?ctiid.334488 · Note
• https://t.me/CVEtracker/38967 · Telegram Post