EUVD-2025-201594
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)
2025-12-07
cna@vuldb.com
2.1
CVSS 4.0 · NVD
Severity by source
NVD
PRIMARY
2.1
LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X
Lifecycle Timeline
5
Severity Changed
Apr 29, 2026 - 01:11 NVD
MEDIUM
LOW
CVSS changed
Apr 29, 2026 - 01:11 NVD
6.3 (MEDIUM)
2.1 (LOW)
EUVD ID Assigned
Mar 15, 2026 - 17:50 euvd
EUVD-2025-201594
Analysis Generated
Mar 15, 2026 - 17:50 vuln.today
CVE Published
Dec 07, 2025 - 05:15 nvd
MEDIUM 6.3
DescriptionCVE.org
A vulnerability was determined in SGAI Space1 NAS N1211DS up to 1.0.915. Impacted is the function RENAME_FILE/OPERATE_FILE/NGNIX_UPLOAD of the file /cgi-bin/JSONAPI of the component gsaiagent. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Command injection in SGAI Space1 NAS N1211DS firmware up to 1.0.915 allows remote attackers to execute arbitrary OS commands via the /cgi-bin/JSONAPI endpoint. The vulnerable RENAME_FILE, OPERATE_FILE, and NGNIX_U
Same technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).