high8.0
CVE-2022-23765
This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS.
Impact
This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iptime | Nas1dual Firmware | before 1.4.86 |
| Iptime | Nas2dual Firmware | before 1.4.86 |
| Iptime | Nas4dual Firmware | before 1.4.86 |