Vulnerability · Published May 21, 2021 · Assigned by qnap

CVE-2021-28798Relative Path Traversal Vulnerability in QTS and QuTS hero

High 8.8

In plain English

A high-severity improper access control in QTS from QNAP Systems Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.9%top 39.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to modify files that impact system integrity. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.2.1630 Build 20210406 and later QTS 4.3.6.1663 Build 20210504 and later QTS 4.3.3.1624 Build 20210416 and later QuTS hero h4.5.2.1638 Build 20210414 and later QNAP NAS running QTS 4.5.3 are not affected.

Affected products (as reported)

Vendor	Product	Versions
QNAP Systems Inc.	QTS	unspecified – before 4.5.2.1630 Build 20210406unspecified – before 4.3.6.1663 Build 20210504unspecified – before 4.3.3.1624 Build 20210416
QNAP Systems Inc.	QuTS hero	unspecified – before h4.5.2.1638 Build 20210414

Weakness: CWE-284, CWE-23 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://www.qnap.com/zh-tw/security-advisory/qsa-21-14 x_refsource_MISC