ORICO

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

ORICO records in CISA KEV

No ORICO vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cd3510 Firmware 1 record MEDIUM

Records

2 records

TI-2025-42868 CVE-2025-69429 · GHSA-m43v-grhw-r4h4

The ORICO NAS CD3510 (version V1.9.12 and below) contains an Incorrect Symlink Follow…

MEDIUM 62

The ORICO NAS CD3510 (version V1.9.12 and below) contains an Incorrect Symlink Follow vulnerability that could be exploited by attackers to leak or tamper with the internal file system.

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.00312 Published 2026-02-03 No fix listed CWE-59

TI-2025-12998 CVE-2025-14220 · GHSA-9mq6-g5wr-2rx3

ORICO CD3510 File Upload path traversal

LOW 24

A security vulnerability has been detected in ORICO CD3510 1.9.12.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00414 Published 2025-12-08 No fix listed CWE-22

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0