Ransomwarecritical

QNAP addressed a critical flaw that allows compromising NAS devices

Security Affairsby @securityaffairsJul 6, 2021 · 08:52 UTC (Jul 6, 2021)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-28809 CVE-2021-28799

Tags: cve-2021-28809 cve-2021-28799 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-28799	Improper Authorization in QNAP HBS 3 Allows Remote Login to NAS Devices	9.8	78%	KEVRansomware	May 13, 2021 KEV Mar 31, 2022
CVE-2021-28809	An improper access control vulnerability has been reported to affect certain legacy versions of HBS 3	9.8	16%		Jul 8, 2021

From the original article

2 min read at securityaffairs.com

Taiwanese vendor QNAP addressed a critical flaw, tracked as CVE-2021-28809, that could be exploited to compromise vulnerable NAS devices. Taiwanese vendor QNAP fixed a critical vulnerability, tracked as CVE-2021-28809 , that could be exploited by attackers to compromise vulnerable NAS devices.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.