PT-2002-2670 · Iomega · Iomega Nas A300U

Published 2002-12-31 · Updated 2024-01-25 · CVE-2002-1949

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Iomega NAS A300U

Description The issue concerns the transmission of passwords in cleartext by the Network Attached Storage (NAS) Administration Web Page, allowing remote attackers to intercept the administrative password.

Recommendations For Iomega NAS A300U, consider disabling the web administration interface until a fix is available to prevent remote attackers from sniffing the administrative password. Restrict access to the administrative web page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2002-1949

Affected Products

Iomega Nas A300U

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1949 · Security Note
• http://iss.net/security_center/static/10521.php · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0440.html · Note
• https://t.me/cvenotify/68740 · Telegram Post
• http://securityfocus.com/bid/6092 · Note