CVE-2021-38686CWE-287

Improper Authentication Vulnerability in VioStor

High · published November 26, 2021

CVSS v3.1
8.8
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00974 · 61.7th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-11-26T14:00Z
EPSS history
Timeline
  • 26 NOV 14:00Z
    Improper Authentication Vulnerability in VioStor
    cvelistv5