PT-2014-2943 · Thecus · Thecus Nas Server N8800

David Stubley · Publicado 2014-01-24 · Atualizado 2014-01-24 · CVE-2013-5668

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Thecus NAS server N8800 version 5.03.01

Description The issue allows remote attackers to discover the administrator credentials by reading the cleartext content of the ADS/NT Support page.

Recommendations For version 5.03.01, consider restricting access to the ADS/NT Support page until a patch is available to prevent unauthorized disclosure of administrator credentials.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2013-5668

Produtos afetados

Thecus Nas Server N8800

Referências · 4

• 🔥 http://7elements.co.uk/resources/blog/multiple-vulnerabilities-thecus-nas · Exploit
• 🔥 http://7elements.co.uk/news/cve-2013-5668 · Exploit
• http://kb.cert.org/vuls/id/105686 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-5668 · Nota de Segurança