CVE-2014-5457

Published: Aug 25, 2014Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password.

Affected (8)

Products: Qnap: Ts 469u Firmware, Ts 469u, Ts Ec1679u Rp Firmware, Ts Ec1679u Rp, Ts 459u Firmware, Ts 459u, Ss 839 Firmware, Ss 839

Qnap

8 products

Ts 469u Firmware

Ts 469u

Ts Ec1679u Rp Firmware

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Qnap Ts 469u Firmware	Version 4.0.7
Qnap Ts 469u	All versions

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Qnap Ts Ec1679u Rp Firmware	Version 4.0.7
Qnap Ts Ec1679u Rp	All versions

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Qnap Ts 459u Firmware	Version 4.0.7
Qnap Ts 459u	All versions

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Qnap Ss 839 Firmware	Version 4.0.7
Qnap Ss 839	All versions

Related CWEs

CWE-264

References (8)

http://seclists.org/fulldisclosure/2014/Jul/57

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2014/Jul/58

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2014/Jul/59

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2014/Jul/61

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2014/Jul/57

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2014/Jul/58

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2014/Jul/59

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2014/Jul/61

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.