Vulnerability in QNAP Ts-239 Pro Turbo Nas
CVE-2009-3279
The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a LUKS partition by using the AES-256 cipher in plain CBC mode, which allows local users to obtain sensitive information via a watermark attack.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.004 (30.5th percentile) — read the EPSS interpretation.
Affected products
- Qnap Ts-239_pro_turbo_nas — versions 2.1.7_0613, 3.1.0_0627, 3.1.1_0815
- Qnap Ts-639_pro_turbo_nas — versions 2.1.7_0613, 3.1.0_0627, 3.1.1_0815
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)