{"id":13405,"date":"2018-09-20T14:19:10","date_gmt":"2018-09-20T22:19:10","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/09\/20\/news-7172\/"},"modified":"2018-09-20T14:19:10","modified_gmt":"2018-09-20T22:19:10","slug":"news-7172","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2018\/09\/20\/news-7172\/","title":{"rendered":"SSD Advisory \u2013 ASUSTOR NAS Devices Authentication Bypass"},"content":{"rendered":"

Credit to Author: SSD \/ Ori Nimron| Date: Thu, 20 Sep 2018 03:41:42 +0000<\/strong><\/p>\n

\n
\n

Vulnerabilities Summary<\/strong>
An ASUSTOR NAS or network attached storage is “a computer appliance built from the ground up for storing and serving files. It attaches directly to a network, allowing those on the network to access and share files from a central location”. In the following advisory we will discuss a vulnerability found inside ASUSTOR NAS which lets anonymous attackers bypass authentication requirement of the product.<\/p>\n

Credit<\/strong>
An independent security researcher has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program.<\/p>\n

Affected systems<\/strong>
ASUSTOR NAS devices running ADM version 3.0.5.RDU1 and prior
<\/span>
Vulnerability Details<\/strong>
The vulnerability lies in the web interface of ASUSTOR NAS, in the file located in \/initial\/index.cgi, which responsible for initializing the device with your ASUSTOR ID. The problem is that this file is always available even after the first initialization, and it doesn\u2019t require any authentication at all.<\/p>\n

So by abusing \/initial\/index.cgi?act=register, you’ll be logged in with the administrator privileges without any kind of authentication.<\/p>\n

How to Exploit<\/strong>
Visit:<\/p>\n

\t\t<\/p>\n

\n
<\/span> \t\t\t<\/p>\n
\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n
<\/div>\n