What is CVE-2025-14220?

CVE-2025-14220 is a medium-severity vulnerability in Orico Cd3510, classified under Path Traversal. CVSS score: 4.3/10. Published 2025-12-08.

How severe is CVE-2025-14220?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Path Traversal in Orico Cd3510

CVE-2025-14220

A security vulnerability has been detected in ORICO CD3510 1.9.12. This affects an unknown function of the component File Upload. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclose…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.003 (26.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Orico Cd3510 — versions 1.9.12

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cna@vuldb.com (vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (exploit)

Frequently asked questions

What is CVE-2025-14220?: CVE-2025-14220 is a medium-severity vulnerability in Orico Cd3510, classified under Path Traversal. CVSS score: 4.3/10. Published 2025-12-08.
How severe is CVE-2025-14220?: Medium severity. CVSS v3 base score is 4.3 out of 10.