Buffalo TeraStation NAS TS5400R Excessive File Permissions Information Disclosure Vulnerability

An excessive file permissions vulnerability has been identified in Buffalo TeraStation NAS TS5400R devices running firmware versions through 4.02-0.06. This vulnerability allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file via the webserver. The world-readable permissions on the /etc/shadow file can be exploited to retrieve hashed passwords for all configured accounts, including the root account.

Impact

Exploitation of this vulnerability could lead to unauthorized access to hashed passwords for all user accounts on the device, including root, potentially allowing for further exploitation or privilege escalation.