https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:32:45.274021+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2013-10049 CVE-2013-10049 — Raidsonic NAS Devices Unauthenticated Remote Command Execution 2026-10-06T07:32:45.299558+00:00

Affected: Raidsonic Technology GmbH IB-NAS5220, Raidsonic Technology GmbH IB-NAS4220

An OS command injection vulnerability exists in multiple Raidsonic NAS devices—specifically tested on IB-NAS5220 and IB-NAS4220—via the unauthenticated timeHandler.cgi endpoint exposed through the web interface. The CGI script fails to properly sanitize user-supplied input in the timeZone parameter of a POST request, allowing remote attackers to inject arbitrary shell commands.