NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

DNMMM's avatar
DNMMM
Follower
May 04, 2022
Solved

ReadyNAS 524X vulnerability?

I get Nessus reports of one detected vulnerability in a ReadyNAS 524X with firmware 6.10.7.   Vulnerability Desc: The version of Samba running on the remote host is 4.13.x prior to 4.13.17, 4.1...
Feature Request & Feedback
Tips from other users
  • JeraldM's avatar
    JeraldM
    May 04, 2022

    Hi DNMMM,

     

    Thanks for the ping StephenB!

     

    Upon inquiry, please see the following for each vulnerability:

    CVE-2021-44142: Fruit is not enabled by default. 
    CVE-2021-44141: We don't use symlinks.
    CVE-2022-0336 is for Samba AD: we don't use Samba AD.

     

     

    Regards,

     

    JeraldM

    NETGEAR Community Team

StephenB's avatar
StephenB
Guru - Experienced User
May 04, 2022

FYI, I see a very old version on 6.10.7

root@NAS:~# smbstatus --version
Version 4.8.0

 

But Netgear might be backporting security fixes.  Tagging the mods, so they can follow up:  Mark_V and JeraldM 

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More