cve/2017/CVE-2017-5227.md

CVE-2017-5227

Description

QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file.

POC

Reference

• https://www.exploit-db.com/exploits/41745/
• https://www.qnap.com/en/support/con_show.php?cid=113

Github

No PoCs found on GitHub currently.