HOMEVULNERABILITIESVENDORSThecus

ThecusCVEs & Vulnerabilities

5 CVEs affecting Thecus products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

5 CVEs→ All vendors

Most Affected Products

n8800 nas server 3n8800 nas server firmware 3n4800eco 1n4800eco firmware 1n5200pro nas server control panel 1
CVE-2021-34111CRITICAL

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php.

20 May 2022
9.8
CVSS
CVE-2013-5669HIGH

The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attackers to obtain sensitive information by sniffing the network.

24 Jan 2014
7.8
CVSS
CVE-2013-5668HIGH

The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to discover the administrator credentials by reading this page's cleartext content.

24 Jan 2014
7.8
CVSS
CVE-2013-5667CRITICAL

The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a get_userid action with shell metacharacters in the username parameter.

24 Jan 2014
10.0
CVSS
CVE-2008-0804MEDIUMpoc

PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to execute arbitrary PHP code via a URL in the name parameter.

19 Feb 2008
6.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database