Lucene search
HistoryJan 24, 2014 - 4:38 a.m.
CVE-2013-5667
thecus
nas server
n8800
firmware
remote code execution
cve-2013-5667
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.2%
The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a get_userid action with shell metacharacters in the username parameter.
Affected configurations
Node
thecusn8800_nas_server_firmwareMatch5.03.01
thecusn8800_nas_serverMatch-
Related
cvelist
cvelist
CVE-2013-5667
2014-01-24 02:00:00
prion
prion
Design/Logic Flaw
2014-01-24 04:38:00
nvd
nvd
CVE-2013-5667
2014-01-24 04:38:09
seebug
seebug
Thecus NAS Server N8800 get_userid OS命令注入漏洞
2014-02-10 00:00:00
cert
cert
Thecus NAS Server N8800 contains multiple vulnerabilities
2014-01-23 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.2%
Related for CVE-2013-5667