Vendor
QNAP Systems Inc.
649 known vulnerabilities in products by QNAP Systems Inc., 14 of them actively exploited (CISA KEV).
Key figures
649
Vulnerabilities
14
Actively exploited (KEV)
9
Used by ransomware
118
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2022-27593 | DeadBolt Ransomware In CISA KEVRansomware | 10.0 | |
| Critical | CVE-2021-28799 | Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync) In CISA KEVRansomware | 10.0 | |
| Critical | CVE-2019-7195 | QNAP Photo Station Path Traversal Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2019-7192 | QNAP Photo Station Improper Access Control Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2019-7194 | QNAP Photo Station Path Traversal Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2018-19949 | QNAP NAS File Station Command Injection Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2019-7193 | QNAP QTS Improper Input Validation Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2018-19943 | QNAP NAS File Station Cross-Site Scripting Vulnerability In CISA KEVRansomware | 8.0 | |
| Critical | CVE-2018-19953 | QNAP NAS File Station Cross-Site Scripting Vulnerability In CISA KEVRansomware | 6.1 | |
| Critical | CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-2509 | Command Injection Vulnerability in QTS and QuTS hero In CISA KEV | 9.8 | |
| Critical | CVE-2023-47565 | Legacy VioStor NVR In CISA KEV | 8.0 | |
| Critical | CVE-2020-2506 | improper access control vulnerability in Helpdesk In CISA KEV | 7.3 | |
| Critical | CVE-2024-21899 | QTS, QuTS hero, QuTScloud | 9.8 | |
| Critical | CVE-2024-50387 | SMB Service | 9.8 | |
| Critical | CVE-2023-23368 | QTS, QuTS hero, QuTScloud | 9.8 | |
| Critical | CVE-2017-6360 | QNAP QTS: Information Disclosure | 9.8 | |
| High | CVE-2024-53691 | QTS, QuTS hero | 8.8 | |
| Critical | CVE-2017-6361 | QNAP QTS: security vulnerability | 9.8 | |
| High | CVE-2023-51364 | QTS, QuTS hero, QuTScloud | 8.7 | |
| High | CVE-2023-51365 | QTS, QuTS hero, QuTScloud | 8.7 | |
| Critical | CVE-2017-6359 | QNAP QTS: Privilege Escalation | 9.8 | |
| Critical | CVE-2017-13067 | QNAP QTS Media Libary PRODUCT: Remote Code Execution | 9.8 | |
| Critical | CVE-2021-28809 | Missing Authentication for Critical Function in RTRR Server in HBS3 | 9.8 |