| Título | sgwbox N3 NAS V2.0.25 Auth Bypass |
|---|
| Descrição | The sgwbox NAS N3 has an authentication bypass vulnerability. This vulnerability is caused by the failure to actually verify the token field passed in the POST message. This vulnerability can be used to remotely and unauthorizedly disclose internal information of the NAS, manipulate the NAS device to complete specific instructions, etc. |
|---|
| Fonte | ⚠️ https://www.notion.so/sgwbox-NAS-N3-Auth-Bypass-2be6cf4e528a8092b261fbc2abc3430c?source=copy_link |
|---|
| Utilizador | rgyue (UID 92984) |
|---|
| Submissão | 05/12/2025 06h10 (há 10 meses) |
|---|
| Moderação | 14/12/2025 20h01 (10 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 336420 [Shiguangwu sgwbox N3 2.0.25 POST Message /fsnotify token Autenticação fraca] |
|---|
| Pontos | 15 |
|---|