{"id":"CVE-2014-5457","aliases":["EUVD-2014-5344","GHSA-w894-cjc4-xx4h"],"status":"published","title":"QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world...","description":"QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00333,"percentile":0.26858,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2014-08-25T16:00:00Z","modified":"2026-06-17T00:11:35Z","products":[{"vendor":"qnap","product":"ss-839"},{"vendor":"qnap","product":"ss-839_firmware"},{"vendor":"qnap","product":"ts-459u"},{"vendor":"qnap","product":"ts-459u_firmware"},{"vendor":"qnap","product":"ts-469u"},{"vendor":"qnap","product":"ts-469u_firmware"},{"vendor":"qnap","product":"ts-ec1679u-rp"},{"vendor":"qnap","product":"ts-ec1679u-rp_firmware"}],"references":[{"url":"http://seclists.org/fulldisclosure/2014/Jul/57","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/Jul/58","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/Jul/61","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2014/Jul/59","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-5457"},{"url":"https://github.com/advisories/GHSA-w894-cjc4-xx4h"}],"sources":{"cve":[{"id":"CVE-2014-5457","description":"QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password.","status":"published","published":"2014-08-25T16:00:00Z","modified":"2024-09-17T02:26:58.853Z","updated_at":"2026-11-02T14:33:41.889751Z"}],"euvd":[{"id":"EUVD-2014-5344","description":"QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password.","status":"published","published":"2014-08-25T16:00:00Z","modified":"2024-09-17T02:26:58Z","updated_at":"2026-11-03T00:28:40.410394Z"}],"ghsa":[{"id":"GHSA-w894-cjc4-xx4h","title":"QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world...","description":"QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password.","status":"published","published":"2022-05-17T04:38:04Z","modified":"2023-01-28T05:02:13Z","updated_at":"2026-11-02T14:43:44.460546Z"}],"nvd":[{"id":"CVE-2014-5457","description":"QNAP TS-469U with firmware 4.0.7 Build 20140410, TS-459U, TS-EC1679U-RP, and SS-839 use world-readable permissions for /etc/config/shadow, which allows local users to obtain usernames and hashed passwords by reading the password.","status":"published","published":"2014-08-25T16:55:05.697Z","modified":"2026-06-17T00:11:35.637Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:55.19899Z"}]}}