PT-2025-51208 · Shiguangwu · Sgwbox N3

Rgyue · Published 2025-12-15 · Updated 2025-12-15 · CVE-2025-14709

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Shiguangwu sgwbox N3 version 2.0.25

Description A buffer overflow issue exists in the file /usr/sbin/http eshell server component WIRELESSCFGGET Interface of Shiguangwu sgwbox N3. The manipulation of the params argument can lead to a buffer overflow, potentially allowing for remote exploitation. The exploit for this issue has been publicly disclosed.

Recommendations Disable the WIRELESSCFGGET Interface as a temporary workaround until a patch is available. Restrict access to the file /usr/sbin/http eshell server to minimize the risk of exploitation. Avoid using the params argument in the WIRELESSCFGGET Interface until the issue is resolved.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2025-14709

Affected Products

Sgwbox N3

References · 12

• 🔥 https://notion.so/sgwbox-NAS-N3-Buffer-Overflow-2be6cf4e528a80258b82dee0d6d1ebd1?source=copy_link · Exploit
• https://osv.dev/vulnerability/CVE-2025-14709 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14709 · Security Note
• https://twitter.com/CVEnew/status/2000611216763543891 · Twitter Post
• https://twitter.com/0dayPublishing/status/2000467215175352535 · Twitter Post
• https://twitter.com/CveFindCom/status/2000470616495833092 · Twitter Post
• https://vuldb.com/?ctiid.336426 · Note
• https://vuldb.com/?submit.706989 · Note
• https://vuldb.com/?id.336426 · Note
• https://t.me/CVEtracker/39816 · Telegram Post
• https://twitter.com/TheHackerWire/status/2000479820157952109 · Twitter Post
• https://twitter.com/offseq/status/2000469516686639312 · Twitter Post