VIR Vulnerability Intelligence Relay

CVE-2025-14693

medium
Published 2025-12-15 · Modified 2026-04-29
CVSS v3
6.2
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v2
6.5
VIR risk
6.2

Description

A vulnerability has been found in Ugreen DH2100+ up to 5.3.0. This affects an unknown function of the component USB Handler. Such manipulation leads to symlink following. The attack can be executed directly on the physical device. The exploit has been disclosed to the public and may be used. It is suggested to upgrade the affected component.

Predictions

Exploit likelihood
62%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

CWEs

CWE-59 CWE-61

Verify integrity in audit chain (admin only). AS-IS.