Vulnerabilities

TI-2013-04834 CVE-2013-5669 · GHSA-hf4c-4564-9cc8

The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for…

LOW 38

The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02196 Published 2014-01-24 No fix listed CWE-255

TI-2013-04833 CVE-2013-5668 · GHSA-f5wm-62rm-wmhq

The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows…

LOW 38

The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to discover the administrator credentials by reading this page's cleartext content.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02067 Published 2014-01-24 No fix listed CWE-255

TI-2013-04832 CVE-2013-5667 · GHSA-85fw-hhrw-fr33

The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute…

MEDIUM 50

The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a get_userid action with shell metacharacters in the username parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04159 Published 2014-01-24 No fix listed CWE-78

Vulnerabilities

Filters

The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for…

The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows…

The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute…