The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| N8800_nas_server_firmware | Thecus | 5.03.01 (including) | 5.03.01 (including) |
References
- http://www.7elements.co.uk/news/cve-2013-5669/
- http://www.7elements.co.uk/resources/blog/multiple-vulnerabilities-thecus-nas/
- http://www.kb.cert.org/vuls/id/105686
- http://www.7elements.co.uk/news/cve-2013-5669/
- http://www.7elements.co.uk/resources/blog/multiple-vulnerabilities-thecus-nas/
- http://www.kb.cert.org/vuls/id/105686