Design/Logic Flaw

2008-03-2018:44:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

RaidSonic NAS-4220-B with 2.6.0-n(2007-10-11) firmware stores a partition encryption key in an unencrypted /system/.crypt file with base64 encoding, which allows local users to obtain the key.

CPENameOperatorVersion
firmwareeq2.6.0-n

CPE	Name	Operator	Version
	firmware	eq	2.6.0-n

References

secunia.com/advisories/29401

securityreason.com/securityalert/3760

www.securityfocus.com/archive/1/489690/100/0/threaded

www.securityfocus.com/bid/28264