Network Attached Storage (NAS) vulnerabilities
4 published alerts for QNAP Network Attached Storage (NAS).
QNAP NAS File Station Cross-Site Scripting Vulnerability
QNAP Network Attached Storage (NAS) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2018-19953). A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code. CISA remediation due date: 2022-06-14. If you need help checking exposure, call (864) 335-9223.
QNAP NAS File Station Command Injection Vulnerability
QNAP Network Attached Storage (NAS) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2018-19949). A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands. CISA remediation due date: 2022-06-14. If you need help checking exposure, call (864) 335-9223.
QNAP NAS File Station Cross-Site Scripting Vulnerability
QNAP Network Attached Storage (NAS) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2018-19943). A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code. CISA remediation due date: 2022-06-14. If you need help checking exposure, call (864) 335-9223.
QNAP NAS Improper Authorization Vulnerability
QNAP Network Attached Storage (NAS) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-28799). QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device. CISA remediation due date: 2022-04-21. If you need help checking exposure, call (864) 335-9223.