CVE-2013-6277

Published: Feb 13, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

QNAP VioCard 300 has hardcoded RSA private keys.

Affected (2)

Products: Qnap: Viocard 300 Firmware

1 product

Viocard 300 Firmware

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qnap Viocard 300 Firmware	Version rs_b3722
Qnap Viocard 300 Firmware	Version rs_b4631

Running on/with	Platform Versions
Qnap Viocard 300	All versions

Related CWEs

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (4)

http://firmware.re/usenixsec14/

Source: cve@mitre.org

ExploitThird Party Advisory

http://firmware.re/vulns/acsa-2013-002.php

Source: cve@mitre.org

Third Party Advisory

http://firmware.re/usenixsec14/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

http://firmware.re/vulns/acsa-2013-002.php

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.