Strix
26.1K

CVE-2009-3200

UnknownEPSS 0.40%

Last modified

CVE-2009-3200 is a vulnerability of currently unknown severity. The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable, deobfuscating the key, and running a cryptsetup luksOpen command.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.

Description

The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable, deobfuscating the key, and running a cryptsetup luksOpen command.

Metrics

EPSS Probability
0.40%

32.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
QnapTs-239 Pro Turbo Nas2.1.7_0613
QnapTs-239 Pro Turbo Nas3.1.0_0627
QnapTs-239 Pro Turbo Nas3.1.1_0815
QnapTs-639 Pro Turbo Nas2.1.7_0613
QnapTs-639 Pro Turbo Nas3.1.0_0627
QnapTs-639 Pro Turbo Nas3.1.1_0815

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2009-3200?
The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable, deobfuscating the key, and running a cryptsetup luksOpen command.
How severe is CVE-2009-3200?
Severity scoring for CVE-2009-3200 is pending analysis. The EPSS model estimates a 0.40% probability of exploitation in the next 30 days.
How do I fix CVE-2009-3200?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2009

View all 2009CVEs →

Are you affected by CVE-2009-3200?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST