{"uuid": "acae3069-8c01-4b28-bec0-9578f32d22f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10049", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/raidsonic_nas_ib5220_exec_noauth.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Michael Messner \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Different Raidsonic NAS devices are vulnerable to OS command injection via the web\\n          interface. The vulnerability exists in timeHandler.cgi, which is accessible without\\n          authentication. This module has been tested with the versions IB-NAS5220 and\\n          IB-NAS4220. Since this module is adding a new user and modifying the inetd daemon\\n          configuration, this module is set to ManualRanking and could cause target instability.\", \"disclosure_date\": \"2013-02-04\", \"fullname\": \"exploit/linux/http/raidsonic_nas_ib5220_exec_noauth\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Raidsonic NAS Devices Unauthenticated Remote Command Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/raidsonic_nas_ib5220_exec_noauth.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"linux/http/raidsonic_nas_ib5220_exec_noauth\", \"references\": [\"CVE-2013-10049\", \"OSVDB-90221\", \"EDB-24499\", \"BID-57958\", \"URL-http://www.s3cur1ty.de/m1adv2013-010\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:53.636960Z"}