9.8

CVE-2013-6276

Exploit

QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in authorized_keys files. NOTE: 1. All active models are not affected. The last affected model was EOL since 2010. 2. The legacy authorization mechanism is no longer adopted in all active models

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qnap ≫ Viocard-30 Firmware Version2312_2.1.0
   Qnap ≫ Viocard-30 Version-
Qnap ≫ Viocard-100 Firmware Version-
   Qnap ≫ Viocard-100 Version-
Qnap ≫ Viocard-300 Firmware Versionrc_b3722
   Qnap ≫ Viocard-300 Version-
Qnap ≫ Viocard-300 Firmware Versionrs_b4631
   Qnap ≫ Viocard-300 Version-
Qnap ≫ Viogate-340a Firmware Version-
   Qnap ≫ Viogate-340a Version-
Qnap ≫ Viogate-340 Firmware Version2308_2.1.0
   Qnap ≫ Viogate-340 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.58
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

http://firmware.re/vulns/acsa-2013-002.php
Third Party Advisory
Exploit