Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2021-28813

Insufficiently Protected Credentials Vulnerability in QSW-M2116P-2T2S and QuNetSwitch

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qnap

Description

A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism.We have already fixed this vulnerability in the following versions: QSW-M2116P-2T2S 1.0.6 build 210713 and later QGD-1600P: QuNetSwitch 1.0.6.1509 and later QGD-1602P: QuNetSwitch 1.0.6.1509 and later QGD-3014PT: QuNetSwitch 1.0.6.1519 and later

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QNAP Systems Inc. QSW-M2116P-2T2S

  • unspecified to < 1.0.6 build 210713affected

QNAP Systems Inc. QuNetSwitch

  • unspecified to < 1.0.6.1509affected

QNAP Systems Inc. QuNetSwitch

  • unspecified to < 1.0.6.1509affected

QNAP Systems Inc. QuNetSwitch

  • unspecified to < 1.0.6.1519affected

References