CVE-2025-14106
BaseFortify
Publication date: 2025-12-05
Last updated on: 2025-12-16
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| zspace | q2c_nas_firmware | to 1.1.0210050 (inc) |
| zspace | q2c_nas | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-77 | The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. |
| CWE-74 | The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the ZSPACE Q2C NAS device up to version 1.1.0210050, specifically in the function zfilev2_api.CloseSafe of the HTTP POST Request Handler component. It involves manipulation of the argument safe_dir, which leads to command injection. This means an attacker can remotely execute arbitrary commands on the affected system by exploiting this flaw.
How can this vulnerability impact me? :
The vulnerability allows remote attackers to execute arbitrary commands on the affected device, potentially leading to full system compromise. This can result in unauthorized access, data theft, data manipulation, service disruption, or further attacks within the network.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection can be performed by monitoring for suspicious HTTP POST requests to the endpoint /v2/file/safe/close that include unusual or malicious input in the safe_dir parameter. Network intrusion detection systems (NIDS) or web application firewalls (WAF) can be configured to alert on such requests. Additionally, inspecting logs for POST requests to /v2/file/safe/close with suspicious payloads may help identify exploitation attempts. Specific commands are not provided in the resources, but using tools like curl or tcpdump to capture and analyze traffic to this endpoint could assist in detection. [1, 2]
What immediate steps should I take to mitigate this vulnerability?
No known countermeasures or patches are available from the vendor, as they did not respond to the disclosure. Immediate mitigation steps include replacing the affected ZSPACE Q2C NAS device with an alternative product not vulnerable to this issue. Additionally, restricting network access to the vulnerable endpoint, implementing strict firewall rules, and monitoring for exploitation attempts can help reduce risk until replacement is possible. [1]