| عنوان | SGAI N1211DS NAS v1.0.915 Improper Authentication |
|---|
| الوصف | The SGAI Space1 NAS (model N1211DS, firmware version v1.0.915) contains an unauthorized information disclosure vulnerability. This vulnerability is caused by lax authentication of the GET_USER_INFO interface. By exploiting this vulnerability, sensitive information such as the owner's APP account (phone number) and password of the remote target device can be obtained, thereby enabling unauthorized management of the remote NAS device. |
|---|
| المصدر | ⚠️ https://www.notion.so/2b16cf4e528a80859264db63f2340d7a |
|---|
| المستخدم | renguangyue (UID 92629) |
|---|
| ارسال | 20/11/2025 08:15 AM (5 أشهر منذ) |
|---|
| الاعتدال | 06/12/2025 10:02 AM (16 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 334603 [SGAI Space1 NAS N1211DS حتى 1.0.915 gsaiagent /cgi-bin/JSONAPI GET_FACTORY_INFO/GET_USER_INFO تجاوز الصلاحيات] |
|---|
| النقاط | 0 |
|---|