Researchers
Back
Tim Herres
Researcher from
Daimler TSS
#17109
of 60,591
18.3
Total CVSS
Vulnerabilities
·
3
Medium
3
PT-2013-2128
2013-06-07
5.0
CVE-2013-0142
Qnap
Surveillance Station
The issue concerns a hardcoded guest account in the affected devices, allowing remote attackers to gain web-server login access.
PT-2013-2129
2013-06-07
6.5
CVE-2013-0143
Qnap
Surveillance Station
The issue allows remote authenticated users to execute arbitrary commands. This is achieved by leveraging guest access and placing shell metacharacters in the query string of the 'cgi-bin/pingping.cgi' endpoint.
PT-2013-2130
2013-06-07
6.8
CVE-2013-0144
Qnap
Qnap Viostor Nvr
A cross-site request forgery (CSRF) issue affects the cgi-bin/create user.cgi endpoint, allowing remote attackers to hijack administrator authentication for creating administrative accounts via a NEW USER action.