Sgwbox vulnerabilities
We track 6 vulnerabilities in Sgwbox products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on December 15, 2025.
Latest Sgwbox vulnerabilities
- 9.8 Critical severity
sgwbox N3: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue is some unknown functionality of the file /usr/sbin/http_eshell_server of the component WIRELESSCFGGET Interface. The manipulation of the argument params leads to
- 7.5 High severity
sgwbox N3: Buffer Copy without Checking Size of Input
A weakness has been identified in Shiguangwu sgwbox N3 2.0.25. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/http_eshell_server of the component WIREDCFGGET Interface. Executing manipulation of the argument params can lead to
- 9.8 Critical severity
sgwbox N3: Improper Neutralization of Special Elements used in a Command
A security flaw has been discovered in Shiguangwu sgwbox N3 2.0.25. Affected is an unknown function of the file /usr/sbin/http_eshell_server of the component DOCKER Feature. Performing manipulation of the argument params results in command injection. The attac
- 9.8 Critical severity
sgwbox N3: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in Shiguangwu sgwbox N3 2.0.25. This impacts an unknown function of the file /usr/sbin/http_eshell_server of the component NETREBOOT Interface. Such manipulation leads to command injection. The attack can be launched remotely. Th
- 9.8 Critical severity
sgwbox N3: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in Shiguangwu sgwbox N3 2.0.25. This affects an unknown function of the component SHARESERVER Feature. This manipulation of the argument params causes command injection. The attack can be initiated remotely. The exploit has been
- 9.8 Critical severity
sgwbox N3: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Shiguangwu sgwbox N3 2.0.25. The impacted element is an unknown function of the file /eshell of the component API. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been made