We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2021-44057

Improper authentication in Photo Station



Assignerqnap
Reserved2021-11-19
Published2022-05-05
Updated2024-09-16

Description

An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 6.0.20 ( 2022/02/15 ) and later Photo Station 5.7.16 ( 2022/02/11 ) and later Photo Station 5.4.13 ( 2022/02/11 ) and later



HIGH: 7.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Product status

Any version before 6.0.20 ( 2022/02/15 )
affected

Any version before 5.7.16 ( 2022/02/11 )
affected

Any version before 5.4.13 ( 2022/02/11 )
affected

Credits

Thomas Fady

References

https://www.qnap.com/en/security-advisory/qsa-22-15

cve.org CVE-2021-44057

nvd.nist.gov CVE-2021-44057

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2021-44057
Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.