Vulnerability in QNAP Ss-839
CVE-2014-5457
QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password.
EPSS: 0.003 (25.9th percentile) — read the EPSS interpretation.
Affected products
- Qnap Ss-839
- Qnap Ss-839_firmware — versions 4.0.7
- Qnap Ts-459u
- Qnap Ts-459u_firmware — versions 4.0.7
- Qnap Ts-469u
- Qnap Ts-469u_firmware — versions 4.0.7
- Qnap Ts-ec1679u-rp
- Qnap Ts-ec1679u-rp_firmware — versions 4.0.7
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)