CVE-2013-6276

QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in authorized_keys files. NOTE: 1. All active models are not affected. The last affected model was EOL since 2010. 2. The legacy authorization mechanism is no longer adopted in all active models

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-08-09

Last modified

2024-08-06

Weaknesses

CWE-798

Affected products

• Viocard-100 Firmware (Qnap)
• Viocard-300 Firmware (Qnap)
• Viocard-30 Firmware (Qnap)
• Viogate-340 Firmware (Qnap)
• Viogate-340a Firmware (Qnap)

References

• http://firmware.re/vulns/acsa-2013-002.php
• http://web.archive.org/web/20210320190014/http://firmware.re/vulns/acsa-2013-002.php