CVE-2013-5669

The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attackers to obtain sensitive information by sniffing the network.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2014-01-24

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• N8800 Nas Server (Thecus)
• N8800 Nas Server Firmware (Thecus)

References

• http://www.7elements.co.uk/news/cve-2013-5669/
• http://www.7elements.co.uk/resources/blog/multiple-vulnerabilities-thecus-nas/
• http://www.kb.cert.org/vuls/id/105686