CWE Code: 287
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Improper Authentication
Summary: userhandler.cgi in raidsonic icy box nas firmware 2.3.2.ib.2.rs.1 allows remote attackers to bypass authentication and gain administrator privileges by setting the login parameter to admin. note: the provenance of this information is unknown; the details are obtained solely from third party information.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2009-08-25
Last Modified Date: 2017-08-17