Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-28798

Relative Path Traversal Vulnerability in QTS and QuTS hero

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qnap

Description

A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to modify files that impact system integrity. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.2.1630 Build 20210406 and later QTS 4.3.6.1663 Build 20210504 and later QTS 4.3.3.1624 Build 20210416 and later QuTS hero h4.5.2.1638 Build 20210414 and later QNAP NAS running QTS 4.5.3 are not affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QNAP Systems Inc. QTS

  • unspecified to < 4.5.2.1630 Build 20210406affected
  • unspecified to < 4.3.6.1663 Build 20210504affected
  • unspecified to < 4.3.3.1624 Build 20210416affected
  • 4.5.3unaffected

QNAP Systems Inc. QuTS hero

  • unspecified to < h4.5.2.1638 Build 20210414affected

References