We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2021-44055

Information leakage in Video Station



Assignerqnap
Reserved2021-11-19
Published2022-05-05
Updated2024-09-17

Description

An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote attackers to access data or perform actions that they should not be allowed to perform. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 ( 2022/02/16 ) and later



MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Product status

Any version before 5.5.9 ( 2022/02/16 )
affected

Credits

Thomas Fady

References

https://www.qnap.com/en/security-advisory/qsa-22-14

cve.org CVE-2021-44055

nvd.nist.gov CVE-2021-44055

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2021-44055
Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.