PT-2014-2943 · Thecus · Thecus Nas Server N8800

David Stubley · Published 2014-01-24 · Updated 2014-01-24 · CVE-2013-5668

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Thecus NAS server N8800 version 5.03.01

Description The issue allows remote attackers to discover the administrator credentials by reading the cleartext content of the ADS/NT Support page.

Recommendations For version 5.03.01, consider restricting access to the ADS/NT Support page until a patch is available to prevent unauthorized disclosure of administrator credentials.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2013-5668

Affected Products

Thecus Nas Server N8800

References · 4

• 🔥 http://7elements.co.uk/resources/blog/multiple-vulnerabilities-thecus-nas · Exploit
• 🔥 http://7elements.co.uk/news/cve-2013-5668 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-5668 · Security Note
• http://kb.cert.org/vuls/id/105686 · Note