CVE-2018-19944CWE-311CWE-319

Cleartext Transmission of Sensitive Information in SNMP

published December 31, 2020

CVSS
—
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

A cleartext transmission of sensitive information vulnerability has been reported to affect certain QTS devices. If exploited, this vulnerability allows a remote attacker to gain access to sensitive information. QNAP have already fixed this vulnerability in the following versions: QTS 4.4.3.1354 build 20200702 (and later)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00826 · 56.7th percentile
Weaknesses
CWE-311 · Missing Encryption of Sensitive Data; CWE-319 · Cleartext Transmission of Sensitive Information
Published
2020-12-31T16:33Z
EPSS history
Timeline
  • 31 DEC 16:33Z
    Cleartext Transmission of Sensitive Information in SNMP
    cvelistv5