An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to v3.0.210412 on QTS 4.3.6; versions prior to v3.0.210411 on QTS 4.3.4; versions prior to v3.0.210411 on QTS 4.3.3; versions prior to v16.0.0419 on QuTS hero h4.5.1; versions prior to v16.0.0419 on QuTScloud c4.5.1~c4.5.4. This issue does not affect: QNAP Systems Inc. HBS 2 . QNAP Systems Inc. HBS 1.3 .
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HQnap Hybrid Backup Sync
APPQnap< 3.0.210411< 16.0.0419< 3.0.210412< 16.0.0415Qnap Qts
OSQnap4.3.34.3.44.3.64.5.2Qnap Qutscloud
OSQnapc4.5.1 – c4.5.4Qnap Quts Hero
OSQnaph4.5.1
CISA KEV — szczegółyi
- Dostawcai
- QNAP
- Produkti
- Network Attached Storage (NAS)
- Data dodania do KEVi
- 31 marca 2022
- Termin remediation (USA)i
- 21 kwietnia 2022(po terminie)
- Ransomwarei
- Aktywne kampanie ransomware używają tej podatności
Zastosuj aktualizacje zgodnie z instrukcjami producenta.
▸ Pokaż oryginał (EN)
Apply updates per vendor instructions.
QNAP NAS z HBS 3 zawiera lukę w autoryzacji, która umożliwia atakującym zdalny login do urządzenia.
▸ Pokaż oryginał (EN)
QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.
Powiązane podatności
An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Ph...
A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerabil...
If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNA...
This external control of file name or path vulnerability allows remote attackers to access or modify system fi...
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. ...