CVE-2013-6276

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-08-09 · updated 2026-06-17
Weakness: CWE-798

Description

QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in authorized_keys files. NOTE: 1. All active models are not affected. The last affected model was EOL since 2010. 2. The legacy authorization mechanism is no longer adopted in all active models

Affected products

QNAP Viocard-100 Firmware: all versions
QNAP Viocard-300 Firmware: rc_b3722, rs_b4631
QNAP Viocard-30 Firmware: 2312_2.1.0
QNAP Viogate-340 Firmware: 2308_2.1.0
QNAP Viogate-340A Firmware: all versions

References

http://firmware.re/vulns/acsa-2013-002.php
http://web.archive.org/web/20210320190014/http://firmware.re/vulns/acsa-2013-002.php
http://firmware.re/vulns/acsa-2013-002.php
http://web.archive.org/web/20210320190014/http://firmware.re/vulns/acsa-2013-002.php

Get alerted when CVE-2013-6276 or the next vulnerability affects your stack