CVE-2021-28799 QNAP Network Attached Storage (NAS)
QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.
- CVSS
- not scored
On CISA’s exploited list
QNAP NAS Improper Authorization Vulnerability
- Added
- 2022-03-31
- Federal patch deadline
- 2022-04-21
- Ransomware use
- known