PT-2021-22257 · Qnap · Qnap Viostor

Jpcert/Cc · Published 2021-11-26 · Updated 2021-12-03 · CVE-2021-38686

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QNAP VioStor versions prior to QVR FW 5.1.6 build 20211109

Description An improper authentication issue has been reported, allowing attackers to compromise the system's security if exploited.

Recommendations For QNAP VioStor versions prior to QVR FW 5.1.6 build 20211109, update to QVR FW 5.1.6 build 20211109 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-38686

Affected Products

Qnap Viostor

References · 6

• https://qnap.com/en/security-advisory/qsa-21-52 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38686 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38686 · Vendor Advisory
• https://t.me/cvenotify/23794 · Telegram Post
• https://t.me/cibsecurity/32990 · Telegram Post
• https://t.me/cvenotify/23789 · Telegram Post