PatchTheCVECVE-2008-7081: userHandler.cgi in RaidSonic ICY BOX NAS firmware 2.3.2.IB.2.RS.1 allows remote attackers to bypass authentica
CVE-2008-7081 is a high-severity flaw (CVSS 10.0) affecting icy box nas. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
userHandler.cgi in RaidSonic ICY BOX NAS firmware 2.3.2.IB.2.RS.1 allows remote attackers to bypass authentication and gain administrator privileges by setting the login parameter to admin. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Why this priority
- Critical severity
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 10.0 (High) |
| EPSS exploit chance | 2.2% (top 17%) |
| CISA exploited list | No |
| Weakness | CWE-287 |
| Published | 2009-08-25 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2008-7081?
icy box nas: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2008-7081 being exploited?
CVE-2008-7081 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2008-7081 affect?
CVE-2008-7081 affects icy box nas. Severity is high (CVSS 10.0). userHandler.cgi in RaidSonic ICY BOX NAS firmware 2.3.2.IB.2.RS.1 allows remote attackers to bypass authentication and gain administrator privileges by setting the login parameter to admin. NOTE: the provenance of this information is unknow
How urgent is CVE-2008-7081?
Priority 56/100. Critical severity