CVE-2007-4361 NETGEAR (formerly Infrant) ReadyNAS RAIDiator before 4.00b2-p2-T1 beta creates a default SSH root password derived from the hardware serial number, which makes it easier for remote attackers to guess....
HighCVSS 10.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NETGEAR (formerly Infrant) ReadyNAS RAIDiator before 4.00b2-p2-T1 beta creates a default SSH root password derived from the hardware serial number, which makes it easier for remote attackers to guess the password and obtain login access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear readynas raidiator | = 3.01c1-p1 | No fix listed |
| netgear readynas raidiator | = 3.01c1-p6 | No fix listed |
References
- 26442 patch third-party-advisory vendor-advisory
- 3017 third-party-advisory
- www.infrant.com
- www.infrant.com
- www.infrant.com
- 36357 vdb-entry
- 20070813 Default Root Password in Infrant (now Netgear) ReadyNAS "RAIDiator" mailing-list
- 25290 patch vdb-entry
- readynas-ssh-security-bypass(36011) vdb-entry