Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rq2w-6955-5m7c

Опубликовано: 06 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 and later Video Station 5.3.13 and later Video Station 5.1.8 and later

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 and later Video Station 5.3.13 and later Video Station 5.1.8 and later

EPSS

Процентиль: 39%
0.00179
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 7.1
nvd
почти 4 года назад

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 and later Video Station 5.3.13 and later Video Station 5.1.8 and later

CVSS3: 9.8
fstec
почти 4 года назад

Уязвимость приложения создания фотоальбомов Video Station, связанная с недостатками процедуры аутентификации, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 39%
0.00179
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287