A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism.We have already fixed this vulnerability in the following versions: QSW-M2116P-2T2S 1.0.6 build 210713 and later QGD-1600P: QuNetSwitch 1.0.6.1509 and later QGD-1602P: QuNetSwitch 1.0.6.1509 and later QGD-3014PT: QuNetSwitch 1.0.6.1519 and later
References
Link | Resource |
---|---|
https://www.qnap.com/en/security-advisory/qsa-21-37 | Vendor Advisory |
https://www.qnap.com/en/security-advisory/qsa-21-37 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
History
21 Nov 2024, 06:00
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.qnap.com/en/security-advisory/qsa-21-37 - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 9.6 |
Information
Published : 2021-09-10 04:15
Updated : 2024-11-21 06:00
NVD link : CVE-2021-28813
Mitre link : CVE-2021-28813
CVE.ORG link : CVE-2021-28813
JSON object : View
Products Affected
qnap
- qsw-m2116p-2t2s
- qsw-m2116p-2t2s_firmware
- qgd-1602p
- qgd-1600p
- qgd-3014pt
- qunetswitch