Default Root Password in Infrant (now Netgear) ReadyNAS "RAIDiator"

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory Default Root Password in Infrant now Netgear ReadyNAS "RAIDiator" Release Date: August 13, 2007 Authors: Brian Chapados [email protected] Felix Domke [email protected] Timeline: Jul 25, 2007 - discovery Jul 29, 2007 - vendor...

CVE-2007-4361

The CVE-2007-4361 issue affects NETGEAR ReadyNAS RAIDiator prior to 4.00b2-p2-T1 beta. The root cause is a default SSH root password derived from the hardware serial number, enabling remote attackers to guess the password and gain login access. The vulnerability is contextually severe: authentica...