Nas1dual Firmware vulnerabilities

2 known vulnerabilities in Nas1dual Firmware from Iptime. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  NAS1dual, NAS2dual, NAS4dual: Cross-Site Request Forgery

  CVE-2022-23771Oct 17, 2022EFM-Networks

  This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete u

• 8.8 High severity

  NAS1dual, NAS2dual, NAS4dual: Cross-Site Request Forgery

  CVE-2022-23765Aug 17, 2022EFM-Networks

  This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request.