QNAP: exploited vulnerabilities
- 11exploited vulnerabilities
- 9used by ransomware
- Dec 21, 2023latest one added
- Photo Station 4
- Network Attached Storage (NAS) 4
- VioStor NVR 1
- QTS 1
- QNAP Network-Attached Storage (NAS) 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Dec 21, 2023 | OS Command Injection | VioStor NVR | High 8.0 | 73% |
| Sep 8, 2022 | Externally Controlled Reference | Photo Station | Critical 10.0 | 88% |
| Jun 8, 2022 | Path Traversal | Photo Station | Critical 9.8 | 90% |
| Jun 8, 2022 | Path Traversal | Photo Station | Critical 9.8 | 83% |
| Jun 8, 2022 | Improper Input Validation | QTS | Critical 9.8 | 14% |
| Jun 8, 2022 | Improper Access Control | Photo Station | Critical 9.8 | 88% |
| May 24, 2022 | NAS File Station Cross-Site Scripting | Network Attached Storage (NAS) | Medium 6.1 | 31% |
| May 24, 2022 | NAS File Station Command Injection | Network Attached Storage (NAS) | Critical 9.8 | 30% |
| May 24, 2022 | NAS File Station Cross-Site Scripting | Network Attached Storage (NAS) | High 8.0 | 23% |
| Apr 11, 2022 | Network-Attached Storage (NAS) Command Injection | QNAP Network-Attached Storage (NAS) | Critical 9.8 | 34% |
| Mar 31, 2022 | NAS Improper Authorization | Network Attached Storage (NAS) | Critical 10.0 | 78% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.