by Kastro
Paper/Archive/CVE-2021-44055

CVE-2021-44055

QNAP Systems Inc. Video Station — Information leakage in Video Station

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 64.5.645 × 2012.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote attackers to access data or perform actions that they should not be allowed to perform. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 ( 2022/02/16 ) and later

Affected

ProductAffectedFixed inSource
Video Stationunspecified – < 5.5.9 ( 2022/02/16 )5.5.9 ( 2022/02/16 )CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
qnap (CNA)5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

refqnap.com/en/security-advisory/qsa-22-14