The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attackers to obtain sensitive information by sniffing the network.
References
Link | Resource |
---|---|
http://www.7elements.co.uk/resources/blog/multiple-vulnerabilities-thecus-nas/ | Exploit |
http://www.7elements.co.uk/news/cve-2013-5669/ | Exploit |
http://www.kb.cert.org/vuls/id/105686 | US Government Resource |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2014-01-23 20:38
Updated : 2014-01-24 08:27
NVD link : CVE-2013-5669
Mitre link : CVE-2013-5669
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
thecus
- n8800_nas_server
- n8800_nas_server_firmware