Unrated severityNVD Advisory· Published Aug 25, 2014· Updated May 6, 2026
CVE-2014-5457
CVE-2014-5457
Description
QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password.
Affected products
8- cpe:2.3:o:qnap:ts-469u_firmware:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:o:qnap:ts-ec1679u-rp_firmware:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:h:qnap:ts-ec1679u-rp:-:*:*:*:*:*:*:*
- cpe:2.3:o:qnap:ts-459u_firmware:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:o:qnap:ss-839_firmware:4.0.7:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.