CVE-2021-44055

—

CVSS 3.1

9.8 critical

EPSS

1%p62

Published

May 5, 2022 (May 5, 2022)

Modified

Jun 17, 2026

Description

An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote attackers to access data or perform actions that they should not be allowed to perform. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 ( 2022/02/16 ) and later

Vendors: qnap
Products: video station
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news2 stories

QNAP Releases Firmware Patches for 9 New Flaws Affecting NAS Devices

The Hacker NewsMay 9, 02:52 UTC · May 9, 2022Vulnerability CVE-2022-27588 CVE-2021-38693 CVE-2021-44051+6 CVEs

QNAP fixes multiple flaws, including a QVR RCE vulnerability

Security AffairsMay 6, 18:38 UTC · May 6, 2022Vulnerability CVE-2022-27588 CVE-2021-44057 CVE-2021-44051+6 CVEs