high7.5Public exploit code
CVE-2017-5227
QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- QNAP QTS < 4.2.4 - Domain Privilege Escalation2017-03-27 · local · hardware · Verified
Impact
QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qnap | Qts | through 4.2.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/97056
- http://www.securityfocus.com/bid/97072
- http://www.securitytracker.com/id/1038091
- http://www.ush.it/team/ush/hack-qnap/qnap.txt
- https://www.exploit-db.com/exploits/41745/
- https://www.qnap.com/en-us/releasenotes/
- https://www.qnap.com/en/support/con_show.php?cid=113
- http://www.securityfocus.com/bid/97056
- http://www.securityfocus.com/bid/97072
- http://www.securitytracker.com/id/1038091
- http://www.ush.it/team/ush/hack-qnap/qnap.txt
- https://www.exploit-db.com/exploits/41745/
- https://www.qnap.com/en-us/releasenotes/
- https://www.qnap.com/en/support/con_show.php?cid=113