PULSE
FEED
ransomlockbit5 reclama a lcww.com.eg · EG · Not Foundransomlockbit5 reclama a neweramachines.com · US · Manufacturingransomlockbit5 reclama a grupoabg.com · MX · Manufacturingransomqilin reclama a KD Corp · KR · Not Foundransomakira reclama a Videk · GB · Technologyransomakira reclama a Boyle, Pecharich, Cline, Whittington and Stallings · Professional Servicesransom0x00 reclama a bienestarempresarial · MX · Professional Servicesransomiah6477 reclama a middleby · US · Manufacturingransomiah6477 reclama a sunshine-mills · Agriculture and Food Productionransomakira reclama a Svd (Sun Valley Dairy) · US · Agriculture and Food Productionransomqilin reclama a Hocon Gas · NG · Energy & Utilitiesransomqilin reclama a HyperGen · US · Technologyransomqilin reclama a Chattanooga Shooting Supplies · US · Retail & E-Commerceransomqilin reclama a Brame Telecom · BR · Technologyransomlockbit5 reclama a lcww.com.eg · EG · Not Foundransomlockbit5 reclama a neweramachines.com · US · Manufacturingransomlockbit5 reclama a grupoabg.com · MX · Manufacturingransomqilin reclama a KD Corp · KR · Not Foundransomakira reclama a Videk · GB · Technologyransomakira reclama a Boyle, Pecharich, Cline, Whittington and Stallings · Professional Servicesransom0x00 reclama a bienestarempresarial · MX · Professional Servicesransomiah6477 reclama a middleby · US · Manufacturingransomiah6477 reclama a sunshine-mills · Agriculture and Food Productionransomakira reclama a Svd (Sun Valley Dairy) · US · Agriculture and Food Productionransomqilin reclama a Hocon Gas · NG · Energy & Utilitiesransomqilin reclama a HyperGen · US · Technologyransomqilin reclama a Chattanooga Shooting Supplies · US · Retail & E-Commerceransomqilin reclama a Brame Telecom · BR · Technology
← Todos los CVEs
CVE Watch—

CVE-2021-28799

QNAP NAS Improper Authorization Vulnerability

CVSS

—

Sin CVSS

EPSS

78.3%

p100

KEV

SÍ

31 mar 2022

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d
78.3%EPSS · 30 días78.3%
2026-09-162026-10-14
Ficha del catálogo KEV

Producto

QNAP / Network Attached Storage (NAS)

Vulnerabilidad

QNAP NAS Improper Authorization Vulnerability

Añadido a KEV

31 mar 2022

Remediar antes de

21 abr 2022

Uso conocido en ransomware

Sí

Descripción resumida

QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-28799

CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2018-199536.1 MED
98.1%
KEV—79QNAP NAS File Station Cross-Site Scripting Vulnerability14d
CVE-2018-199499.8 CRÍ
98.1%
KEV—79QNAP NAS File Station Command Injection Vulnerability14d
CVE-2018-199438.0 ALT
97.6%
KEV—79QNAP NAS File Station Cross-Site Scripting Vulnerability64d