Description
This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrary user privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EFM Networks | NAS1dual, NAS2dual, NAS4dual | unspecified – < 1.4.86 | 1.4.86 |