CVE-2020-2509 QNAP QNAP Network-Attached Storage (NAS)
QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution.
- CVSS
- not scored
On CISA’s exploited list
QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
- Added
- 2022-04-11
- Federal patch deadline
- 2022-05-02
- Ransomware use
- not known