Firetruck

CVE-2021-28799

KEV · Ransomware
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
HBS 1.3QNAP Systems Inc. / HBS 1.3all versionsunaffected
HBS 2QNAP Systems Inc. / HBS 2all versionsunaffected
HBS 3QNAP Systems Inc. / HBS 3>= unspecified, < v3.0.210411affected
HBS 3QNAP Systems Inc. / HBS 3>= unspecified, < v3.0.210411affected
HBS 3QNAP Systems Inc. / HBS 3>= unspecified, < v16.0.0415affected
HBS 3QNAP Systems Inc. / HBS 3>= unspecified, < v16.0.0419affected
HBS 3QNAP Systems Inc. / HBS 3>= unspecified, < v16.0.0419affected
HBS 3QNAP Systems Inc. / HBS 3>= unspecified, < v3.0.210412affected