Thecus

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Thecus records in CISA KEV

No Thecus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

N8800 Nas Server 3 records MEDIUM N8800 Nas Server Firmware 3 records MEDIUM N4800eco Firmware 1 record MEDIUM N5200pro Nas Server Control Panel 1 record LOW

Records

3 records in N8800 Nas Server Firmware · all components

TI-2013-04832 CVE-2013-5667 · GHSA-85fw-hhrw-fr33

The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute…

MEDIUM 50

The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a get_userid action with shell metacharacters in the username parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04159 Published 2014-01-24 No fix listed CWE-78

TI-2013-04834 CVE-2013-5669 · GHSA-hf4c-4564-9cc8

The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for…

LOW 38

The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02196 Published 2014-01-24 No fix listed CWE-255

TI-2013-04833 CVE-2013-5668 · GHSA-f5wm-62rm-wmhq

The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows…

LOW 38

The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to discover the administrator credentials by reading this page's cleartext content.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02067 Published 2014-01-24 No fix listed CWE-255

Open these records in search →

Critical	2
High	2
Medium	2
Low	0
No CVSS	0