Iptime

Nas1dual Firmware

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2022-23771

  • EPSS 0.13%
  • Veröffentlicht 17.10.2022 16:15:20
  • Zuletzt bearbeitet 21.11.2024 06:49:15

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to o...

8.8

CVE-2022-23765

  • EPSS 0.22%
  • Veröffentlicht 17.08.2022 21:15:08
  • Zuletzt bearbeitet 21.11.2024 06:49:14

This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request.

7.5

CVE-2021-26620

  • EPSS 0.61%
  • Veröffentlicht 25.03.2022 19:15:08
  • Zuletzt bearbeitet 21.11.2024 05:56:36

An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attackers are able to steal important information in the server by exploiting vulnerabilities such as insufficient authentication when a...

8

CVE-2020-7847

  • EPSS 0.27%
  • Veröffentlicht 23.02.2021 16:15:13
  • Zuletzt bearbeitet 21.11.2024 05:37:54

The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36.