Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2020-2499

Hard-coded Password Vulnerability in QES

Description

A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could allow attackers to log in with a hard-coded password. QNAP has already fixed the issue in QES 2.1.1 Build 20200515 and later.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QNAP Systems Inc. QES

  • unspecified to < 2.1.1affected

References