Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2017-5227

Description

QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file.

POC

Reference

- https://www.exploit-db.com/exploits/41745/

- https://www.qnap.com/en/support/con_show.php?cid=113

Github

No PoCs found on GitHub currently.