Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-28797

Stack Buffer Overflow in Surveillance Station

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qnap

Description

A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. QNAP have already fixed this vulnerability in the following versions: Surveillance Station 5.1.5.4.3 (and later) for ARM CPU NAS (64bit OS) and x86 CPU NAS (64bit OS) Surveillance Station 5.1.5.3.3 (and later) for ARM CPU NAS (32bit OS) and x86 CPU NAS (32bit OS)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QNAP Systems Inc. Surveillance Station

  • unspecified to < 5.1.5.4.3affected

QNAP Systems Inc. Surveillance Station

  • unspecified to < 5.1.5.3.3affected

References