CVE-2025-14693

MEDIUM EPSS 10.2%
Published Dec 15, 20256mo ago · Modified Jun 17, 20262w ago
5.2 CVSS 4.0
Medium
Find Similar
Published Dec 15, 2025 6mo ago
Last Modified Jun 17, 2026 2w ago

Description

A vulnerability has been found in Ugreen DH2100+ up to 5.3.0. This affects an unknown function of the component USB Handler. Such manipulation leads to symlink following. The attack can be executed directly on the physical device. The exploit has been disclosed to the public and may be used. It is suggested to upgrade the affected component.

CVSS Details

Base Score
5.2
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Physical
Attack Complexity Low
Privileges Required High
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
10.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 2

CWE-59
CWE-61

References 5

  • vuldb.com https://vuldb.com/?ctiid.336411
  • vuldb.com https://vuldb.com/?id.336411
  • vuldb.com https://vuldb.com/?submit.704646
  • vuldb.com https://vuldb.com/?submit.704657
  • notion.so https://www.notion.so/2bc6cf4e528a8083bf3fc6f7a953f0a1

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.