Qnap Vulnerabilità

Sequenza temporale

Genere

Prodotto

QNAP QTS148
QNAP QuTS hero51
QNAP QuTScloud44
QNAP QuTS Hero27
QNAP Photo Station14

Contromisure

Official Fix221
Temporary Fix1
Workaround0
Unavailable4
Not Defined54

Sfruttabilità

High5
Functional0
Proof-of-Concept14
Unproven1
Not Defined260

Accesso al vettore

Not Defined0
Physical0
Local15
Adjacent17
Network248

Autenticazione

Not Defined0
High62
Low76
None142

Interazione dell'utente

Not Defined0
Required58
None222

C3BM Index

CVSSv3 Base

≤10
≤20
≤33
≤420
≤540
≤676
≤737
≤839
≤953
≤1012

CVSSv3 Temp

≤10
≤20
≤35
≤418
≤545
≤680
≤739
≤834
≤947
≤1012

VulDB

≤10
≤21
≤314
≤442
≤558
≤643
≤729
≤862
≤919
≤1012

NVD

≤10
≤21
≤30
≤40
≤513
≤68
≤732
≤845
≤923
≤1040

CNA

≤10
≤20
≤32
≤417
≤515
≤633
≤715
≤823
≤920
≤1013

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤81
≤90
≤100

Exploiter 0 giorni

<1k51
<2k134
<5k94
<10k0
<25k1
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k280
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (52): Container Station (1), Helpdesk (5), Image2PDF (1), Kazoo Server (2), Media Streaming Add-on (1), Multimedia Console (4), Music Station (7), NAS (10), NAS Application Media Streaming Add-On (4), NVR (3), NVR Storage Expansion (2), NetBak Replicator (1), Photo Station (15), Proxy Server (4), Q'center (2), Q'center Virtual Appliance (7), QES (4), QSS (2), QTS (153), QUSBCam2 (2), QVP (3), QVPN (2), QVR (10), QVR Elite (5), QVR Guard (5), QVR Pro (5), QVR Pro Appliance (1), QVR Pro Client (1), QcalAgent (3), Qfile App (1), Qfinder Pro (1), QmailAgent (2), Qsync (1), Qsync Central (1), QuLog Center (1), QuMagie (6), QuNetSwitch (1), QuTS (5), QuTS Hero (27), QuTScloud (47), QuTS hero (56), SS-839 (1), Signage Station (4), Surveillance Station Pro (2), TS-469U Turbo NAS (1), TS212P (1), Ts-239 Pro Turbo Nas (3), Video Station (9), VioStor NVR (1), Viostor Network Video Recorder (1), myQNAPcloud (1), myQNAPcloud Connect (1)

Link to Vendor Website: https://www.qnap.com/

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
08/03/20243.63.6QNAP QuTScloud/QTS/QuTS hero Network/Virtual Switch cross site scriptingNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000430.00CVE-2023-32969
08/03/20244.64.6QNAP Systems Photo Station directory traversalSconosciutoNot DefinedOfficial Fix0.000440.06CVE-2023-47221
08/03/20244.74.6QNAP myQNAPcloud/QTS sql injectionNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000440.00CVE-2024-21901
08/03/20245.15.0QNAP QTS/QuTS hero escalazione di privilegiNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000430.08CVE-2023-34980
08/03/20245.75.6QNAP QTS/QuTS hero/QuTScloud escalazione di privilegiNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000460.02CVE-2024-21900
08/03/20249.89.6QNAP QTS/QuTS hero/QuTScloud autenticazione deboleNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000910.04CVE-2024-21899
13/02/20245.45.3QNAP QTS/QuTS hero/QuTScloud escalazione di privilegiNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000460.04CVE-2023-50358
13/02/20245.45.3QNAP QTS/QuTS hero/QuTScloud escalazione di privilegiNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.003050.03CVE-2023-47218
02/02/20245.25.2QNAP QTS/QuTS hero/QuTScloud buffer overflowNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000550.02CVE-2023-45035
02/02/20244.74.7QNAP QTS/QuTS hero/QuTScloud directory traversalNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000500.02CVE-2023-45027
02/02/20244.44.3QNAP QTS/QuTS hero/QuTScloud denial of serviceNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000440.02CVE-2023-45028
02/02/20244.74.7QNAP QTS/QuTS hero/QuTScloud directory traversalNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000500.03CVE-2023-45026
02/02/20249.08.8QNAP QTS/QuTS hero/QuTScloud escalazione di privilegiNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000670.04CVE-2023-45025
02/02/20245.25.2QNAP QTS/QuTS hero/QuTScloud buffer overflowNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000550.06CVE-2023-41292
02/02/20245.85.7QNAP QTS/QuTS hero/QuTScloud escalazione di privilegiNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000470.02CVE-2023-41283
02/02/20245.85.7QNAP QTS/QuTS hero/QuTScloud escalazione di privilegiNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000470.02CVE-2023-41282
02/02/20245.85.7QNAP QTS/QuTS hero/QuTScloud escalazione di privilegiNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000470.02CVE-2023-41281
02/02/20245.85.7QNAP QTS/QuTS hero/QuTScloud buffer overflowNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000530.02CVE-2023-41280
02/02/20245.85.7QNAP QTS/QuTS hero/QuTScloud buffer overflowNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000530.02CVE-2023-41279
02/02/20245.85.7QNAP QTS/QuTS hero/QuTScloud buffer overflowNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000530.02CVE-2023-41278
02/02/20245.85.7QNAP QTS/QuTS hero/QuTScloud buffer overflowNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000530.05CVE-2023-41277
02/02/20245.55.5QNAP QTS/QuTS hero/QuTScloud buffer overflowNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000550.03CVE-2023-41276
02/02/20245.85.7QNAP QTS/QuTS hero/QuTScloud buffer overflowNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000550.02CVE-2023-41275
02/02/20244.44.3QNAP QTS/QuTS hero/QuTScloud denial of serviceNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000440.02CVE-2023-41274
02/02/20245.55.5QNAP QTS/QuTS hero/QuTScloud buffer overflowNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000550.02CVE-2023-41273

255 non vengono visualizzate più voci

Do you want to use VulDB in your project?

Use the official API to access entries easily!