raidsonic technology vulnerabilities

Products

• firmware 1
• IB-NAS4220 1
• IB-NAS5220 1

Latest raidsonic technology CVEs

Newest publication first

1. CVE-2013-10049 Raidsonic NAS Devices Unauthenticated Remote Command Execution

   Published 2025-08-01

   Critical·CVSS 9.3 EPSS 2.7% Framework module

   An OS command injection vulnerability exists in multiple Raidsonic NAS devices—specifically tested on IB-NAS5220 and IB-NAS4220—via the unauthenticated timeHandler.cgi endpoint exposed through the web interface. The CGI script fails to properly sanitize user-supplied input in the...

2. CVE-2008-1431 RaidSonic NAS-4220-B with 2.6.0-n(2007-10-11) firmware stores a partition encryption key in an unencrypted /system/.crypt file with base64 encoding, which allows local users to obtain the key.

   Published 2008-03-20

   Low·CVSS 2.1 EPSS 0.19%

   RaidSonic NAS-4220-B with 2.6.0-n(2007-10-11) firmware stores a partition encryption key in an unencrypted /system/.crypt file with base64 encoding, which allows local users to obtain the key.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.