Firetruck

CVE-2021-28799

KEV · Ransomware

QNAP NAS Improper Authorization Vulnerability

View CVE record →
Vendor / Project
QNAP
Product
Network Attached Storage (NAS)
Date added
Mar 31, 2022
Due date
Apr 21, 2022
Known ransomware use
Known
CWEs
CWE-285

Description

QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.

Required action

Apply updates per vendor instructions.

Notes