← Vulnerability feed

Vulnerability record · CVE-2013-0142 · published 7 June 2013

CVE-2013-0142: Qnap viostor network video recorder vulnerability

Qnap · Viostor Network Video Recorder

QNAP VioStor NVR devices with firmware 4.0.3, and the Surveillance Station Pro component in QNAP NAS, have a hardcoded guest account, which allows remote attackers to obtain web-server login access via unspecified vectors.

5.0 CVSS 2.0 Medium EPSS 1.3% · top 30.6% CWE-255 · CWE-255
5.0CVSS 2.0 base score
1.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
2References
16 Jun 2026Last modified by NVD

Description

QNAP VioStor NVR devices with firmware 4.0.3, and the Surveillance Station Pro component in QNAP NAS, have a hardcoded guest account, which allows remote attackers to obtain web-server login access via unspecified vectors.

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.kb.cert.org/vuls/id/927644 US Government Resource
http://www.kb.cert.org/vuls/id/927644 US Government Resource

Track CVE-2013-0142 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.8CVE-2013-0144Qnap viostor network video recorder cross-site request forgery vulnerabilityCross-site request forgery (CSRF) vulnerability in cgi-bin/create_user.cgi on QNAP VioStor NVR devices with firmware 4.0.3 allows remote attackers to…EPSS 0.62%6.5CVE-2013-0143Qnap viostor network video recorder code injection vulnerabilitycgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authen…EPSS 7.0%8.8CVE-2014-1812Microsoft Windows Group Policy Preferences credential exposure and privilege escalationGroup Policy Preferences in multiple Windows versions stored and distributed passwords in a way that did not properly protect them, allowing any auth…KEVEPSS 65%analysed

Source: NIST National Vulnerability Database (record CVE-2013-0142), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.