CVE-2019-10630

A plaintext password vulnerability in the Zyxel NAS 326 through 5.21 allows an elevated privileged user to get the admin password of the device.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
VendorProductVersion
zyxelnas326_firmware
𝑥
≤ 5.21
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://maxwelldulin.com/BlogPost?post=3236967424
http://maxwelldulin.com/BlogPost?post=3236967424