Vulnerabilityhigh
QNAP Working on Patches for OpenSSL Flaws Affecting its NAS Devices
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2021-3711+1 related CVE | In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt() | 9.8 group max | 88% |
From the original article
2 min read at thehackernews.com
Network-attached storage (NAS) appliance maker QNAP said it's currently investigating two recently patched security flaws in OpenSSL to determine their potential impact, adding it will release security updates should its products turn out to be vulnerable. Tracked as CVE-2021-3711 (CVSS score: 7. 5) and CVE-2021-3712 (CVSS score: 4.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.