Unscored CVE-2009-3279 EUVD-2009-3262GHSA-r64c-q5mp-r47f

The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a LUKS partition by using the AES-256 cipher…

Published Sep 21, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create a LUKS partition by using the AES-256 cipher in plain CBC mode, which allows local users to obtain sensitive information via a watermark attack.

References

http://www.baseline-security.de/downloads/BSC-Qnap_Crypto_Backdoor-CVE-2009-3200.txt
36793 third-party-advisory
20090918 Advisory: Crypto backdoor in Qnap storage devices (CVE-2009-3200) mailing-list