« Volver al listado

CVE-2014-5457

Estado: ModificadaBaja (2.1)—

QNAP TS-469U con firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, y SS-839 utilizan permisos de lectura universal para /etc/config/shadow, lo que permite a usuarios locales obtener los nombres de los usuarios y las contraseñas en hash mediante la lectura de la contraseña.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (8)

Qnap — Ss-839Qnap — Ss-839 FirmwareQnap — Ts-459uQnap — Ts-459u FirmwareQnap — Ts-469uQnap — Ts-469u FirmwareQnap — Ts-ec1679u-rpQnap — Ts-ec1679u-rp Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-5457",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-08-25T16:55:05.697",
  "references": [
    {
      "url": "http://seclists.org/fulldisclosure/2014/Jul/57",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2014/Jul/58",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2014/Jul/59",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2014/Jul/61",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2014/Jul/57",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2014/Jul/58",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2014/Jul/59",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2014/Jul/61",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password."
    },
    {
      "lang": "es",
      "value": "QNAP TS-469U con firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, y SS-839 utilizan permisos de lectura universal para /etc/config/shadow, lo que permite a usuarios locales obtener los nombres de los usuarios y las contraseñas en hash mediante la lectura de la contraseña."
    }
  ],
  "lastModified": "2026-06-17T00:11:35.637",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qnap:ts-469u_firmware:4.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2B65BB8-4B24-48A4-90A7-FAE5C5E260DB"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qnap:ts-469u:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "331E1B35-C5FD-44B5-9827-157D35ACB2C5"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qnap:ts-ec1679u-rp_firmware:4.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6BEA901D-BB92-4D55-A6FD-70131F041A55"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qnap:ts-ec1679u-rp:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C58E082B-988F-4F52-AE3D-97278E30B2DF"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qnap:ts-459u_firmware:4.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6199EB5-BBC8-4458-BCFE-08E81854CECF"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qnap:ts-459u:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2780069E-B319-46B8-AD58-A2E64E08F356"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qnap:ss-839_firmware:4.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3016E6EB-D391-43D2-8C34-CEAA53DD2D7D"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qnap:ss-839:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9FFDFCF4-A1FC-407D-AB69-011157AA99DC"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}