ByteOS Network

NVD Vulnerability Details :

CVE-2025-14693

Awaiting Analysis

Source-cna@vuldb.com

Published At-15 Dec, 2025 | 01:15

Updated At-28 Jan, 2026 | 07:15

A vulnerability has been found in Ugreen DH2100+ up to 5.3.0. This affects an unknown function of the component USB Handler. Such manipulation leads to symlink following. The attack can be executed directly on the physical device. The exploit has been disclosed to the public and may be used. It is suggested to upgrade the affected component.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	7.0	HIGH	CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	6.2	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Secondary	2.0	6.5	MEDIUM	AV:L/AC:L/Au:M/C:C/I:C/A:C

Type: Secondary

Version: 4.0

Base score: 7.0

Base severity: HIGH

Vector:

CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Primary

Version: 3.1

Base score: 6.2

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 2.0

Base score: 6.5

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:M/C:C/I:C/A:C

Weaknesses

CWE ID	Type	Source
CWE-59	Secondary	cna@vuldb.com
CWE-61	Secondary	cna@vuldb.com

CWE ID: CWE-59

Type: Secondary

Source: cna@vuldb.com

CWE ID: CWE-61

Type: Secondary

Source: cna@vuldb.com

References

Hyperlink	Source	Resource
https://vuldb.com/?ctiid.336411	cna@vuldb.com	N/A
https://vuldb.com/?id.336411	cna@vuldb.com	N/A
https://vuldb.com/?submit.704646	cna@vuldb.com	N/A
https://vuldb.com/?submit.704657	cna@vuldb.com	N/A
https://www.notion.so/2bc6cf4e528a8083bf3fc6f7a953f0a1	cna@vuldb.com	N/A