| शीर्षक | SGAI N1211DS NAS v1.0.915 Command Injection |
|---|
| विवरण | The SGAI Space1 NAS (model N1211DS, firmware version v1.0.915) contains an unauthorized remote command execution vulnerability caused by command injection. An attacker who has not verified their identity can use the OPERATE_FILE command interface to manipulate files or directories whose name containing malicious commands, thereby triggering a command injection vulnerability and gaining the highest level of control over the remote target NAS device. |
|---|
| स्रोत | ⚠️ https://www.notion.so/2b16cf4e528a80f2ada9dc83651a4013 |
|---|
| उपयोगकर्ता | renguangyue (UID 92629) |
|---|
| सबमिशन | 20/11/2025 08:17 AM (5 महीनों पहले) |
|---|
| संयम | 06/12/2025 10:02 AM (16 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 334604 [SGAI Space1 NAS N1211DS तक 1.0.915 gsaiagent /cgi-bin/JSONAPI RENAME_FILE/OPERATE_FILE/NGNIX_UPLOAD अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|