critical9.8
CVE-2013-6276
QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in authorized_keys files.
Impact
QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in authorized_keys files. NOTE: 1. All active models are not affected. The last affected model was EOL since 2010. 2. The legacy authorization mechanism is no longer adopted in all active models
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qnap | Viocard-30 Firmware | Version 2312_2.1.0 |
| Qnap | Viocard-100 Firmware | All versions |
| Qnap | Viocard-300 Firmware | Versions rc_b3722, rs_b4631 |
| Qnap | Viogate-340a Firmware | All versions |
| Qnap | Viogate-340 Firmware | Version 2308_2.1.0 |