EUVD-2016-1856

Malware in sbrugna...

CVE-2016-10862

Neet AirStream NAS1.1 devices have a password of ifconfig for the root account. This cannot be changed via the configuration page...

CVE-2016-10862

Neet AirStream NAS1.1 devices have a password of ifconfig for the root account. This cannot be changed via the configuration page...

Design/Logic Flaw

Neet AirStream NAS1.1 devices have a password of ifconfig for the root account. This cannot be changed via the configuration page...

CVE-2016-10862

Neet AirStream NAS1.1 devices have a password of ifconfig for the root account. This cannot be changed via the configuration page...

CVE-2016-10862

Affected product: Neet AirStream NAS1.1. Issue: The root account uses the hard-coded password "ifconfig" that cannot be changed via the device’s configuration page, indicating a default credential trust-management problem. Impact (as described): CVSS metrics indicate high impact to confidentialit...

CVE-2016-10861

Neet AirStream NAS1.1 devices allow CSRF attacks that cause the settings binary to change the AP name and password...

Cross site request forgery (csrf)

Neet AirStream NAS1.1 devices allow CSRF attacks that cause the settings binary to change the AP name and password...

CVE-2016-10861

CVE-2016-10861 affects Neet AirStream NAS1.1 devices via CSRF in the settings binary that can change the AP name and password. This is documented across multiple feeds (NVD/NVD-derived entries and Red Hat). The vulnerability arises from CSRF, with impact described as the AP name/password being al...