by Kastro
Paper/Archive/CVE-2021-44056

CVE-2021-44056

QNAP Systems Inc. Video Station — Improper authentication in Video Station

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 60.5.605 × 2012.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 and later Video Station 5.3.13 and later Video Station 5.1.8 and later

Affected

ProductAffectedFixed inSource
Video Stationunspecified – < 5.5.95.5.9CNA
Video Stationunspecified – < 5.3.135.3.13CNA
Video Stationunspecified – < 5.1.85.1.8CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
qnap (CNA)7.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

References

refqnap.com/en/security-advisory/qsa-22-14