CVE-2009-3278

MEDIUM

QNAP TS-239 Pro/TS-639 Pro <3.1.1 - Info Disclosure

Title source: llm

Description

The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which makes it easier for local users to determine this key via a brute-force attack.

References (4)

[Broken Link] http://secunia.com/advisories/36793

[Exploit] http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt

[Broken Link, Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/506607/100/0/threaded

[Broken Link, Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/36467

Scores

CVSS v3 5.5

EPSS 0.0007

EPSS Percentile 22.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-338

Status draft

Affected Products (6)

qnap/ts-239_pro_firmware

qnap/ts-639_pro_firmware

Timeline

Published Sep 21, 2009

Tracked Since Feb 18, 2026