CVE-2020-2509

KEV

QNAP Network-Attached Storage (NAS) Command Injection Vulnerability

View CVE record →

Vendor / Project: QNAP
Product: QNAP Network-Attached Storage (NAS)
Date added: Apr 11, 2022
Due date: May 2, 2022
Known ransomware use: Unknown
CWEs: CWE-77, CWE-78

Description

QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-2509