Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
2.1
CVSSv2

CVE-2014-5457

Published: 25/08/2014 Updated: 26/08/2014
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Ts-469u Firmware

Vulnerability Summary

QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password.

Vulnerable Product Search on Vulmon Subscribe to Product

qnap ts-469u_firmware 4.0.7

qnap ts-469u -

qnap ts-ec1679u-rp_firmware 4.0.7

qnap ts-ec1679u-rp -

qnap ts-459u_firmware 4.0.7

qnap ts-459u -

qnap ss-839_firmware 4.0.7

qnap ss-839 -

References

CWE-264http://seclists.org/fulldisclosure/2014/Jul/59http://seclists.org/fulldisclosure/2014/Jul/58http://seclists.org/fulldisclosure/2014/Jul/57http://seclists.org/fulldisclosure/2014/Jul/61https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middleCVE-2024-34558CVE-2024-32674CVE-2024-34351XPath injectionCVE-2023-45866CVE-2024-25528CVE-2024-25517path traversal
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook