Shiguangwu sgwbox N3 Improper Authentication Vulnerability in POST Message Handler

An improper authentication vulnerability has been identified in Shiguangwu sgwbox N3 version 2.0.25. The issue arises in an unknown function of the file '/fsnotify' within the POST Message Handler component. Manipulating the 'token' argument leads to inadequate authentication, allowing remote exploitation. This vulnerability has been publicly disclosed, and the vendor was notified but did not respond.

Impact

Exploitation of this vulnerability bypasses authentication, potentially allowing unauthorized users to access internal information, manipulate the NAS device, and execute specific commands.