Is there a public PoC exploit available for CVE-2025-14704?

Yes, a public proof-of-concept exploit is available for CVE-2025-14704. Prioritise patching immediately. EPSS: 0.4%.

sgwbox N3 Firmware CVE-2025-14704

Q: What is the CVSS score of CVE-2025-14704?

CVE-2025-14704 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

MEDIUM

Path Traversal (CWE-22)

2025-12-15 cna@vuldb.com

Path Traversal N3 Firmware

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.3 HIGH

Network-accessible, no auth, low impacts consistent with file read.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 17:15 vuln.today

CVE Published

Dec 15, 2025 - 05:15 cve.org

MEDIUM 5.5

DescriptionCVE.org

A vulnerability was found in Shiguangwu sgwbox N3 2.0.25. The impacted element is an unknown function of the file /eshell of the component API. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Path traversal vulnerability in Shiguangwu sgwbox N3 NAS firmware 2.0.25 allows remote unauthenticated attackers to read arbitrary files via the /eshell API endpoint. A public exploit is available, and no vendor patch exists yet. EPSS score of 0.42% indicates moderate exploitation probability, though no active exploitation is currently confirmed (no CISA KEV listing).

Technical ContextAI

The vulnerability is a classic path traversal (CWE-22) affecting the /eshell endpoint of the sgwbox N3 API. The CPE string cpe:2.3:o:sgwbox:n3_firmware:* indicates the impact is limited to the N3 model's firmware. Path traversal occurs when user-supplied filenames are not properly sanitized, allowing an attacker to read files outside the intended directory. The low CVSS impact metrics (VC:L/VI:L/VA:L) suggest the endpoint likely exposes limited filesystem access, not arbitrary code execution.

RemediationAI

No vendor-released patch identified at time of analysis; the vendor did not respond to disclosure. As a compensating control, block network access to the /eshell endpoint (e.g., via firewall rules or reverse proxy ACLs) or restrict it to trusted internal IPs only. Deploy a web application firewall (WAF) rule to block path traversal patterns (e.g., '../' sequences). Monitor logs for suspicious requests to /eshell. Trade-off: blocking the endpoint may disrupt legitimate functionality if any, which is unknown.