← Back

Ts 239 Pro Turbo Nas

ts-239_pro_turbo_nas

Vendor: Qnap • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-3279
1Qnap
2Ts 239 Pro Turbo Nas
Ts 639 Pro Turbo Nas
Apr 23, 2026
Sep 21, 2009
N/A· v4
N/A· v3
4.9 MEDIUM· v2
The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a LUKS partition by using the AES-256 cipher in plain CBC mode, which allows local users to obtain sensitive information via...Show more
The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a LUKS partition by using the AES-256 cipher in plain CBC mode, which allows local users to obtain sensitive information via a watermark attack.Show less
CVE-2009-3200
1Qnap
2Ts 239 Pro Turbo Nas
Ts 639 Pro Turbo Nas
Apr 23, 2026
Sep 21, 2009
N/A· v4
N/A· v3
5.9 MEDIUM· v2
The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passph...Show more
The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable, deobfuscating the key, and running a cryptsetup luksOpen command.Show less