N3 Firmware
Monthly
Multiple ipTIME router models have a command injection vulnerability in the upnp_relay() function, allowing remote attackers to execute arbitrary OS commands through crafted UPnP requests.
Path traversal vulnerability in Shiguangwu sgwbox N3 NAS firmware 2.0.25 allows remote unauthenticated attackers to read arbitrary files via the /eshell API endpoint. A public exploit is available, and no vendor patch exists yet. EPSS score of 0.42% indicates moderate exploitation probability, though no active exploitation is currently confirmed (no CISA KEV listing).
Multiple ipTIME router models have a command injection vulnerability in the upnp_relay() function, allowing remote attackers to execute arbitrary OS commands through crafted UPnP requests.
Path traversal vulnerability in Shiguangwu sgwbox N3 NAS firmware 2.0.25 allows remote unauthenticated attackers to read arbitrary files via the /eshell API endpoint. A public exploit is available, and no vendor patch exists yet. EPSS score of 0.42% indicates moderate exploitation probability, though no active exploitation is currently confirmed (no CISA KEV listing).