Ts 239 Pro Turbo Nas
Approved changes feed: RSS · Atom
cpe:2.3:h:qnap:ts-239_pro_turbo_nas:3.1.1_0815:*:*:*:*:*:*:*
part: h version: 3.1.1_0815 update: *
| Vendor | Qnap (a402dda4-b7da-50eb-b0f8-700e564ee87d) |
|---|---|
| Product | Ts 239 Pro Turbo Nas (4d6110a1-3b37-5196-a18a-dde0fbc23432) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-3279 |
vulnerable | 2026-06-08 04:51:33.169627 |
Details available
The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a LUKS partition by using the AES-256 cipher in plain CBC mode, which allows local users to obtain sensitive information via a watermark attack.
Published: 2009-09-21T19:00:00.000Z
Updated: 2024-08-07T06:22:24.345Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3200 |
vulnerable | 2026-06-08 04:51:32.810286 |
Details available
The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable, deobfuscating the key, and running a cryptsetup luksOpen command.
Published: 2009-09-21T19:00:00.000Z
Updated: 2024-08-07T06:14:56.419Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.