PT-2007-5542 · NetGear · Readynas Raidiator

Published 2007-08-15 · Updated 2018-10-15 · CVE-2007-4361

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ReadyNAS RAIDiator versions prior to 4.00b2-p2-T1 beta

Description The issue allows remote attackers to guess the default SSH root password, which is derived from the hardware serial number, making it easier to obtain login access.

Recommendations For versions prior to 4.00b2-p2-T1 beta, update to version 4.00b2-p2-T1 beta or later to resolve the issue. As a temporary workaround, consider changing the default SSH root password to a strong, unique password to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-4361

Affected Products

Readynas Raidiator

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2007-4361 · Security Note
• http://securityfocus.com/bid/25290 · Patch
• http://secunia.com/advisories/26442 · Vendor Advisory
• http://infrant.com/forum/viewtopic.php?t=12249 · Note
• http://securityfocus.com/archive/1/476266/100/0/threaded · Note
• http://osvdb.org/36357 · Note
• http://infrant.com/forum/viewtopic.php?t=3366&start=30 · Note
• http://infrant.com/forum/viewtopic.php?t=12313 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36011 · Note
• http://securityreason.com/securityalert/3017 · Note