Vulnerability in Qnap Nas
CVE-2013-0142
QNAP VioStor NVR devices with firmware 4.0.3, and the Surveillance Station Pro component in QNAP NAS, have a hardcoded guest account, which allows remote attackers to obtain web-server login access via unspecified vectors.
EPSS: 0.013 (67.0th percentile) — read the EPSS interpretation.
Affected products
- Qnap Nas
- Qnap Surveillance_station_pro
- Qnap Viostor_network_video_recorder — versions 4.0.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)