Iomega NAS A300U is reported to send NAS administrative authentication credentials in plaintext across the network. The credentials may be disclosed to attackers with the ability to intercept network traffic, which may enable them to gain unauthorized access to the NAS administrative interface. This issue was reported for Iomega NAS A300U on Unix platforms. Other platforms and Iomega devices may also be affected.
Iomega NAS A300U is reported to send NAS administrative authentication credentials in plaintext across the network. The credentials may be disclosed to attackers with the ability to intercept network traffic, which may enable them to gain unauthorized access to the NAS administrative interface. This issue was reported for Iomega NAS A300U on Unix platforms. Other platforms and Iomega devices may also be affected.