Vulnerability Description
The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable, deobfuscating the key, and running a cryptsetup luksOpen command.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qnap | Ts-239 Pro Turbo Nas | 2.1.7_0613 |
| Qnap | Ts-639 Pro Turbo Nas | 2.1.7_0613 |
Related Weaknesses (CWE)
References
- http://forum.qnap.com/viewtopic.php?f=11&t=11214&start=20#p63346
- http://forum.qnap.com/viewtopic.php?f=12&t=12104&start=10#p63341
- http://secunia.com/advisories/36793
- http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200Exploit
- http://www.securityfocus.com/archive/1/506607/100/0/threaded
- http://www.securityfocus.com/bid/36467
- http://www.securitytracker.com/id?1022916
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53391
- http://forum.qnap.com/viewtopic.php?f=11&t=11214&start=20#p63346
- http://forum.qnap.com/viewtopic.php?f=12&t=12104&start=10#p63341
- http://secunia.com/advisories/36793
- http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200Exploit
- http://www.securityfocus.com/archive/1/506607/100/0/threaded
- http://www.securityfocus.com/bid/36467
- http://www.securitytracker.com/id?1022916
FAQ
What is CVE-2009-3200?
CVE-2009-3200 is a vulnerability with a CVSS score of 5.9 (MEDIUM). The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users ...
How severe is CVE-2009-3200?
CVE-2009-3200 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-3200?
Check the references section above for vendor advisories and patch information. Affected products include: Qnap Ts-239 Pro Turbo Nas, Qnap Ts-639 Pro Turbo Nas.