Vulnerability · Published Dec 7, 2025 · Assigned by VulDB

CVE-2025-14188UGREEN DH2100+ nas_svr create handler_file_backup_create command injection

High 7.2

In plain English

A high-severity command injection in DH2100+ from UGREEN. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.7% (higher than 86% of all known vulnerabilities).

Severity (CVSS 3.1)7.2High

Exploit odds (30 days)2.7%top 14.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security vulnerability has been detected in UGREEN DH2100+ up to 5.3.0.251125. This impacts the function handler_file_backup_create of the file /v1/file/backup/create of the component nas_svr. The manipulation of the argument path leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Upgrading the affected component is advised.

Affected products (as reported)

Vendor	Product	Versions
UGREEN	DH2100+	5.3.0.251125

Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

References

VDB-334608 | UGREEN DH2100+ nas_svr create handler_file_backup_create command injection vdb-entry, technical-description
VDB-334608 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #698833 | UGREEN DH2100+ NAS V4.2.0.601 Remote Command Execution third-party-advisory
https://www.notion.so/25e2b76e8e0c80578014fff04a950576 exploit