← Database

CVE-2022-23765

HIGH CVSS: 8.0 Published: 2022-08-17 Modified: 2026-06-17

Description

This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request.

Affected Platforms

Iptime Nas1DualIptime Nas1Dual FirmwareIptime Nas4Dual FirmwareIptime Nas4DualIptime Nas2DualIptime Nas2Dual Firmware

Weakness Type

CWE-352, CWE-352

References