Shiguangwu Sgwbox N3 Command Injection Vulnerability in SHARESERVER Feature
Vulnerability
A command injection vulnerability has been identified in Shiguangwu Sgwbox N3 version 2.0.25. This issue arises in the SHARESERVER feature, where the 'params' argument is not properly sanitized, allowing remote attackers to execute arbitrary commands on the affected NAS device. The vulnerability has been publicly disclosed, and an exploit is available.
Impact
Exploitation of this vulnerability allows for unauthorized remote command execution, with the potential for gaining root control over the affected NAS device.
Added: Dec 15, 2025, 5:17 AM
Updated: Dec 15, 2025, 5:17 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
8.7remediation
0.0relevance
1.5threat
6.5urgency
2.9incentive
5.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.