Back to search
CVE-2009-3278
Published: Sep 21, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 use the rand library function to generate a certain recovery key, which makes it easier for local users to determine this key via a brute-force attack.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
36793
third-party-advisory
x_refsource_SECUNIA
20090918 Advisory: Crypto backdoor in Qnap storage devices (CVE-2009-3200)
mailing-list
x_refsource_BUGTRAQ
36467
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now