CVE-2025-69429
Incorrect Symlink Follow in ORICO NAS CD3510 Enables File Tampering
Publication date: 2026-02-03
Last updated on: 2026-02-11
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| orico | cd3510_firmware | to 1.9.12 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-59 | The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The ORICO NAS CD3510 (version V1.9.12 and below) has an Incorrect Symlink Follow vulnerability. This means that an attacker can exploit the way the device handles symbolic links on USB drives. Specifically, an attacker can format a USB drive to the ext4 file system, create a symbolic link pointing to the root directory of the USB drive, and then insert this drive into the NAS device. When the NAS mounts the USB drive, the attacker can access the symlink directory on the NAS, which allows them to access and potentially tamper with all files within the NAS system.
How can this vulnerability impact me? :
This vulnerability can lead to unauthorized access and modification of files stored on the NAS device. An attacker exploiting this flaw could leak sensitive information by accessing internal files or tamper with critical data, potentially causing data loss, corruption, or unauthorized disclosure.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
I don't know