CVE-2007-4361

critical

Description

NETGEAR (formerly Infrant) ReadyNAS RAIDiator before 4.00b2-p2-T1 beta creates a default SSH root password derived from the hardware serial number, which makes it easier for remote attackers to guess the password and obtain login access.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/36011

http://www.securityfocus.com/bid/25290

http://www.securityfocus.com/archive/1/476266/100/0/threaded

http://www.osvdb.org/36357

http://www.infrant.com/forum/viewtopic.php?t=3366&start=30

http://www.infrant.com/forum/viewtopic.php?t=12313

http://www.infrant.com/forum/viewtopic.php?t=12249

http://securityreason.com/securityalert/3017

http://secunia.com/advisories/26442

Details

Source: Mitre, NVD

Published: 2007-08-15

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H