CVE-2013-6276: QNAP Viocard-100 Firmware

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in authorized_keys files. NOTE: 1. All active models are not affected. The last affected model was EOL since 2010. 2. The legacy authorization mechanism is no longer adopted in all active models

Affected products

• QNAP Viocard-100 Firmware: affected versions not specified
• QNAP Viocard-300 Firmware: version rc_b3722 only; version rs_b4631 only
• QNAP Viocard-30 Firmware: version 2312_2.1.0 only
• QNAP Viogate-340 Firmware: version 2308_2.1.0 only
• QNAP Viogate-340a Firmware: affected versions not specified

Published 2021-08-09. Last modified 2026-06-17.