PT-2022-3455 · Qnap · Video Station

Thomas Fady · Published 2022-05-05 · Updated 2022-05-13 · CVE-2021-44056

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Video Station versions prior to 5.1.8 Video Station versions prior to 5.3.13 Video Station versions prior to 5.5.9

Description An improper authentication issue affects QNAP devices running Video Station, allowing attackers to compromise system security by exploiting the vulnerability. This issue is related to deficiencies in the authentication procedure, which can be exploited by a remote attacker to elevate their privileges.

Recommendations For versions prior to 5.1.8, update to Video Station 5.1.8 or later. For versions prior to 5.3.13, update to Video Station 5.3.13 or later. For versions prior to 5.5.9, update to Video Station 5.5.9 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2022-04233

CVE-2021-44056

Affected Products

Video Station

References · 5

• https://qnap.com/en/security-advisory/qsa-22-14 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44056 · Security Note
• https://bdu.fstec.ru/vul/2022-04233 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44056 · Vendor Advisory
• https://t.me/cvenotify/29745 · Telegram Post