CVE-2009-3200: Medium severity qnap nas vulnerability

Published Sep 21, 2009

Updated

The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable, deobfuscating the key, and running a cryptsetup luksOpen command.

Affected Software

6 affected components

QNAP Ts-239 Pro Turbo Nas=2.1.7_0613

QNAP Ts-239 Pro Turbo Nas=3.1.0_0627

QNAP Ts-239 Pro Turbo Nas=3.1.1_0815

QNAP Ts-639 Pro Turbo Nas=2.1.7_0613

QNAP Ts-639 Pro Turbo Nas=3.1.0_0627

QNAP Ts-639 Pro Turbo Nas=3.1.1_0815

Event History

Sep 21, 2009

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-3200?

CVE-2009-3200 is considered a high severity vulnerability due to its potential to allow unauthorized access to sensitive data on the affected QNAP devices.

How do I fix CVE-2009-3200?

To fix CVE-2009-3200, update the firmware of the QNAP devices to the latest version provided by QNAP that addresses this vulnerability.

Which devices are affected by CVE-2009-3200?

CVE-2009-3200 affects the QNAP TS-239 Pro and TS-639 Pro models running specific firmware versions 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815.

What does CVE-2009-3200 specifically exploit?

CVE-2009-3200 exploits the creation of an undocumented recovery key stored in flash memory, allowing local users to bypass the passphrase for encrypted hard drives.

Is there a workaround for CVE-2009-3200?

Currently, the best practice for mitigating CVE-2009-3200 is to apply the recommended firmware updates from QNAP.