CVE-2013-0142

Published: Jun 7, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

QNAP VioStor NVR devices with firmware 4.0.3, and the Surveillance Station Pro component in QNAP NAS, have a hardcoded guest account, which allows remote attackers to obtain web-server login access via unspecified vectors.

Affected (4)

Products: Qnap: Viostor Network Video Recorder, Nas, Surveillance Station Pro

Qnap

3 products

Viostor Network Video Recorder

Nas

Surveillance Station Pro

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Qnap Viostor Network Video Recorder	Version 4.0.3
Qnap Viostor Network Video Recorder	All versions

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Qnap Nas	All versions
Qnap Surveillance Station Pro	All versions

Related CWEs

CWE-255

References (2)

http://www.kb.cert.org/vuls/id/927644

Source: cret@cert.org

US Government Resource

http://www.kb.cert.org/vuls/id/927644

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.