Vulnerabilities > CVE-2021-28800 - Unspecified vulnerability in Qnap QTS

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

qnap

critical

NVD

Published: 2021-06-24

Updated: 2024-11-21

Summary

A command injection vulnerability has been reported to affect QNAP NAS running legacy versions of QTS. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.3.6.1663 Build 20210504; versions prior to 4.3.3.1624 Build 20210416. This issue does not affect: QNAP Systems Inc. QTS 4.5.3. QNAP Systems Inc. QuTS hero h4.5.3. QNAP Systems Inc. QuTScloud c4.5.5.

Vulnerable Configurations

Part	Description	Count
OS	Qnap Qnap QTS 4.3.4 Qnap QTS 4.3.4.0358 Qnap QTS 4.3.4.0370 Qnap QTS 4.3.4.0372 Qnap QTS 4.3.4.0374 Qnap QTS 4.3.4.0387 Qnap QTS 4.3.4.0411 Qnap QTS 4.3.4.0416 Qnap QTS 4.3.4.0427 Qnap QTS 4.3.4.0434 Qnap QTS 4.3.4.0435 Qnap QTS 4.3.4.0451 Qnap QTS 4.3.4.0483 Qnap QTS 4.3.4.0486 Qnap QTS 4.3.4.0506 Qnap QTS 4.3.4.0516 Qnap QTS 4.3.4.0526 Qnap QTS 4.3.4.0551 Qnap QTS 4.3.4.0557 Qnap QTS 4.3.4.0561 Qnap QTS 4.3.4.0569 Qnap QTS 4.3.4.0593 Qnap QTS 4.3.4.0597 Qnap QTS 4.3.4.0604 Qnap QTS 4.3.4.0899 Qnap QTS 4.3.4.1029 Qnap QTS 4.3.4.1082 Qnap QTS 4.3.4.1190 Qnap QTS 4.3.4.1282 Qnap QTS 4.3.4.1368 Qnap QTS 4.3.4.1417 Qnap QTS 4.3.4.1463 Qnap QTS 4.3.4.1632 Qnap QTS 4.3.4.1652 Qnap QTS 4.3.4.1976 Qnap QTS 4.3.4.2107 Qnap QTS 4.3.4.2242 Qnap QTS 4.3.4.2451 Qnap QTS 4.3.4.2675 Qnap QTS 4.3.4.2814 Qnap QTS 4.3.5 Qnap QTS 4.3.6 Qnap QTS 4.3.6.0895 Qnap QTS 4.3.6.0907 Qnap QTS 4.3.6.0923 Qnap QTS 4.3.6.0944 Qnap QTS 4.3.6.0959 Qnap QTS 4.3.6.0979 Qnap QTS 4.3.6.0993 Qnap QTS 4.3.6.1013 Qnap QTS 4.3.6.1033 Qnap QTS 4.3.6.1070 Qnap QTS 4.3.6.1154 Qnap QTS 4.3.6.1218 Qnap QTS 4.3.6.1263 Qnap QTS 4.3.6.1286 Qnap QTS 4.3.6.1333 Qnap QTS 4.3.6.1411 Qnap QTS 4.3.6.1446 Qnap QTS 4.3.6.1620 Qnap QTS - Qnap QTS 4.0 Qnap QTS 4.0.3 Qnap QTS 4.1.0 Qnap QTS 4.1.1 Qnap QTS 4.1.4 Qnap QTS 4.2.0 Qnap QTS 4.2.1 Qnap QTS 4.2.2 Qnap QTS 4.2.3 Qnap QTS 4.2.4 Qnap QTS 4.2.6 Qnap QTS 4.3.1.0013 Qnap QTS 4.3.1.0023 Qnap QTS 4.3.2.0050 Qnap QTS 4.3.2.0060 Qnap QTS 4.3.2.0144 Qnap QTS 4.3.3 Qnap QTS 4.3.3.0095 Qnap QTS 4.3.3.0096 Qnap QTS 4.3.3.0136 Qnap QTS 4.3.3.0154 Qnap QTS 4.3.3.0174 Qnap QTS 4.3.3.0188 Qnap QTS 4.3.3.0210 Qnap QTS 4.3.3.0229 Qnap QTS 4.3.3.0238 Qnap QTS 4.3.3.0262 Qnap QTS 4.3.3.0299 Qnap QTS 4.3.3.0351 Qnap QTS 4.3.3.0353 Qnap QTS 4.3.3.0361 Qnap QTS 4.3.3.0369 Qnap QTS 4.3.3.0378 Qnap QTS 4.3.3.0396 Qnap QTS 4.3.3.0404 Qnap QTS 4.3.3.0416 Qnap QTS 4.3.3.0418 Qnap QTS 4.3.3.0448 Qnap QTS 4.3.3.0514 Qnap QTS 4.3.3.0546 Qnap QTS 4.3.3.0570 Qnap QTS 4.3.3.0868 Qnap QTS 4.3.3.0998 Qnap QTS 4.3.3.1051 Qnap QTS 4.3.3.1098 Qnap QTS 4.3.3.1161 Qnap QTS 4.3.3.1252 Qnap QTS 4.3.3.1315 Qnap QTS 4.3.3.1386 Qnap QTS 4.3.3.1432	224

Summary

Vulnerable Configurations

References