Medium 4.3Published Dec 6, 2025

CVE-2025-14183SGAI Space1 NAS N1211DS gsaiagent JSONAPI GET_USER_INFO credentials storage

Updated under an hour ago (Oct 27, 2026, 5:20 PM ET)

Does this affect you?

It affects SGAI Space1 NAS N1211DS. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for SGAI Space1 NAS N1211DS

Exploited in the last 30 days

A vulnerability was found in SGAI Space1 NAS N1211DS up to 1.0.915. This issue affects the function GET_FACTORY_INFO/GET_USER_INFO of the file /cgi-bin/JSONAPI of the component gsaiagent. The manipulation results in unprotected storage of credentials. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS: 4.3 MEDIUM (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
Weakness (CWE): CWE-256, CWE-255
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulDB
NVD analysis: Deferred
Record last updated: Dec 8, 2025
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

SGAI Space1 NAS N1211DS sgai:space1_nas_n1211ds (from the name)	1.0.915	CNA record

References

References

https://vuldb.com/?id.334603	vdb-entry, technical-description
https://vuldb.com/?ctiid.334603	signature, permissions-required
https://vuldb.com/?submit.698566	third-party-advisory
https://vuldb.com/?submit.698567	third-party-advisory
https://www.notion.so/2b16cf4e528a8000b30bd543247fa1bd	related
https://www.notion.so/2b16cf4e528a80859264db63f2340d7a	exploit

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.