by Kastro
Paper/Archive/CVE-2021-44057

CVE-2021-44057

QNAP Systems Inc. Photo Station — Improper authentication in Photo Station

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 60.5.605 × 2012.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 6.0.20 ( 2022/02/15 ) and later Photo Station 5.7.16 ( 2022/02/11 ) and later Photo Station 5.4.13 ( 2022/02/11 ) and later

Affected

ProductAffectedFixed inSource
Photo Stationunspecified – < 6.0.20 ( 2022/02/15 )6.0.20 ( 2022/02/15 )CNA
Photo Stationunspecified – < 5.7.16 ( 2022/02/11 )5.7.16 ( 2022/02/11 )CNA
Photo Stationunspecified – < 5.4.13 ( 2022/02/11 )5.4.13 ( 2022/02/11 )CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
qnap (CNA)7.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

References

refqnap.com/en/security-advisory/qsa-22-15