CVE:CVE-2022-23765
CNNVD:CNNVD-202208-3326
EFM Networks ipTIME NAS1dual等都是韩国EFM Networks公司的一款网络附加存储器。
EFM Networks ipTIME NAS1dual、NAS2dual、NAS4dual 1.4.86 之前版本存在安全漏洞，远程攻击者利用该漏洞可以通过 POST 请求更改 root 的密码来窃取 root 权限。
solution:Upgrade iptime nas1dual_firmware to a higher version than 1.4.86,and avoid the version (,1.4.86); Upgrade iptime nas2dual_firmware to a higher version than 1.4.86,and avoid the version (,1.4.86); Upgrade iptime nas4dual_firmware to a higher version than 1.4.86,and avoid the version (,1.4.86)