Join us at the legendary Security Wasteland party at Black Hat on August 6th
Register
Products
Government
Resources
Community
Company
Partners
Sign In / Join
Sign In
Advisories
Raidsonic NAS Devices timeHandler.cgi Unauthenticated RCE
Go Back
severity
critical
date
August 1, 2025
Affecting
IB-NAS5220
IB-NAS4220
Affected version range and models are undefined
CVE
CVE-2013-10049
CVE type
OS Command Injection
CVSS
9.3
CVSS V4 Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
Metasploit Module
EDB-24453
EDB-27528 (Metasploit)
Researcher Disclosure
Credit
Michael Messner