CVE-2025-14709CWE-119CWE-120

CVE-2025-14709

Critical · published December 15, 2025

CVSS v3.1
9.8
EPSS
6%
Percentile
93.2
In the wild
Unconfirmed
What it is

🚨 A buffer overflow vulnerability in Shiguangwu's sgwbox N3 could give attackers the keys to your network! 🔥 Think of it like a crowded train station where one unexpected crowd surge can cause chaos — just a little too much pressure and everything goes haywire. That's what happens when an attacker manipulates arguments in this vulnerable file, leading to a system crash or worse. An attacker can exploit this vulnerability to execute arbitrary code on the affected system, potentially gaining full control over it. This could mean accessing sensitive data, disrupting services, or even turning the device into a launching pad for further attacks. The consequences can be absolutely devastating for your network security!

Put simply

Think of it like a crowded train station where one unexpected crowd surge can cause chaos — just a little too much pressure and everything goes haywire. That's what happens when an attacker manipulates arguments in this vulnerable file, leading to a system crash or worse. CVE-2025-14709 is a critical buffer overflow vulnerability in the /usr/sbin/http_eshell_server component of Shiguangwu's WIRELESSCFGGET interface. By manipulating the argument params, remote attackers can exploit this weakness, allowing them to run malicious code on the server.

What to do

An attacker can exploit this vulnerability to execute arbitrary code on the affected system, potentially gaining full control over it. This could mean accessing sensitive data, disrupting services, or even turning the device into a launching pad for further attacks. The consequences can be absolutely devastating for your network security! Immediate action is required! Ensure you update the Shiguangwu sgwbox to the latest version, and disable remote access to the affected service until the patch is applied. Regularly review your network's security settings as a precaution. You've got this! Follow these steps to lock it down and protect your network like a security hero! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.05852 · 93.2th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2025-12-15T12:15Z
Affected products (1)
ProductVersionsFixed in
sgwbox/n3_firmware≤ 2.0.25—
References (4)
EPSS history
Timeline
  • 15 DEC 07:02Z
    Shiguangwu sgwbox N3 WIRELESSCFGGET http_eshell_server buffer overflow
    cvelistv5