CVE-2021-28799Used in ransomware
QNAP Network Attached Storage (NAS)
QNAP NAS Improper Authorization Vulnerability
What it is
QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other QNAP entries on the list
- VioStor NVR QNAP VioStor NVR OS Command Injection Vulnerability CVE-2023-47565 · Dec 21, 2023
- Photo Station QNAP Photo Station Externally Controlled Reference Vulnerability CVE-2022-27593 · Sep 8, 2022
- Photo Station QNAP Photo Station Path Traversal Vulnerability CVE-2019-7195 · Jun 8, 2022
- Photo Station QNAP Photo Station Path Traversal Vulnerability CVE-2019-7194 · Jun 8, 2022
- QTS QNAP QTS Improper Input Validation Vulnerability CVE-2019-7193 · Jun 8, 2022
- Photo Station QNAP Photo Station Improper Access Control Vulnerability CVE-2019-7192 · Jun 8, 2022