Description
NETGEAR (formerly Infrant) ReadyNAS RAIDiator before 4.00b2-p2-T1 beta creates a default SSH root password derived from the hardware serial number, which makes it easier for remote attackers to guess the password and obtain login access.
References
- readynas-ssh-security-bypass(36011) vdb-entry
- 20070813 Default Root Password in Infrant (now Netgear) ReadyNAS "RAIDiator" mailing-list
- http://www.infrant.com/forum/viewtopic.php?t=12249
- 26442 third-party-advisory
- http://www.infrant.com/forum/viewtopic.php?t=12313
- 3017 third-party-advisory
- 36357 vdb-entry
- 25290 vdb-entry
- http://www.infrant.com/forum/viewtopic.php?t=3366&start=30