PT-2007-5542 · NetGear · Readynas Raidiator

Publicado 2007-08-15 · Atualizado 2018-10-15 · CVE-2007-4361

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ReadyNAS RAIDiator versions prior to 4.00b2-p2-T1 beta

Description The issue allows remote attackers to guess the default SSH root password, which is derived from the hardware serial number, making it easier to obtain login access.

Recommendations For versions prior to 4.00b2-p2-T1 beta, update to version 4.00b2-p2-T1 beta or later to resolve the issue. As a temporary workaround, consider changing the default SSH root password to a strong, unique password to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-4361

Produtos afetados

Readynas Raidiator

Referências · 10

• http://infrant.com/forum/viewtopic.php?t=12249 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4361 · Nota de Segurança
• http://securityfocus.com/archive/1/476266/100/0/threaded · Nota
• http://osvdb.org/36357 · Nota
• http://infrant.com/forum/viewtopic.php?t=3366&start=30 · Nota
• http://securityfocus.com/bid/25290 · Correção
• http://infrant.com/forum/viewtopic.php?t=12313 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36011 · Nota
• http://securityreason.com/securityalert/3017 · Nota
• http://secunia.com/advisories/26442 · Aviso do Fabricante