DH2100+ vulnerabilities

2 known vulnerabilities in DH2100+ from Ugreen. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  DH2100+: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2025-14188Dec 7, 2025UgreenEPSS 2.61%

  A security vulnerability has been detected in UGREEN DH2100+ up to 5.3.0.251125. This impacts the function handler_file_backup_create of the file /v1/file/backup/create of the component nas_svr. The manipulation of the argument path leads to command injection.

• 7.2 High severity

  DH2100+: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2025-14187Dec 7, 2025Ugreen

  A weakness has been identified in UGREEN DH2100+ up to 5.3.0.251125. This affects the function handler_file_backup_create of the file /v1/file/backup/create of the component nas_svr. Executing a manipulation of the argument path can lead to buffer overflow. Th