Field Assessment
AI analysis pending.
CVE
CVE-2014-5457
Severity
LOW
CVSS
2.1
EPSS
0.33%
Original Filing — NVD Description
QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password.