Default credentials

2014-08-2516:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password.

CPENameOperatorVersion
ss-839_firmwareeq4.0.7
ts-459u_firmwareeq4.0.7
ts-469u_firmwareeq4.0.7
ts-ec1679u-rp_firmwareeq4.0.7

Name	Operator	Version
ss-839_firmware	eq	4.0.7
ts-459u_firmware	eq	4.0.7
ts-469u_firmware	eq	4.0.7
ts-ec1679u-rp_firmware	eq	4.0.7

References

seclists.org/fulldisclosure/2014/Jul/57

seclists.org/fulldisclosure/2014/Jul/58

seclists.org/fulldisclosure/2014/Jul/59

seclists.org/fulldisclosure/2014/Jul/61