CVE-2013-6276
Critical
Description
QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in authorized_keys files. NOTE: 1. All active models are not affected. The last affected model was EOL since 2010. 2. The legacy authorization mechanism is no longer adopted in all active models
SeverityCritical
CVSS9.8
Exploit probability—
Product
Qnap Viocard-30 Firmware
PublishedAug 9, 2021
First seenAug 9, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnap viocard-30_firmware | 2312_2.1.0 | — |
| qnap viocard-100_firmware | No range specified | — |
| qnap viocard-300_firmware | rc_b3722, rs_b4631 | — |
| qnap viogate-340a_firmware | No range specified | — |
| qnap viogate-340_firmware | 2308_2.1.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.