Hardcoded credentials

2021-08-0918:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.5%

JSON

QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in authorized_keys files. NOTE: 1. All active models are not affected. The last affected model was EOL since 2010. 2. The legacy authorization mechanism is no longer adopted in all active models

CPENameOperatorVersion
viocard-300_firmwareeqrc-b3722
viocard-300_firmwareeqrs-b4631
viocard-30_firmwareeq2312.0.210
viogate-340_firmwareeq2308.0.210

Name	Operator	Version
viocard-300_firmware	eq	rc-b3722
viocard-300_firmware	eq	rs-b4631
viocard-30_firmware	eq	2312.0.210
viogate-340_firmware	eq	2308.0.210

References

firmware.re/vulns/acsa-2013-002.php

web.archive.org/web/20210320190014/http://firmware.re/vulns/acsa-2013-002.php