PULSEUnderground Intel

AO VIVO21sinais / 24h

FEED

ransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.comransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.com

← Todos os CVEs

CVE Watch—

CVE-2021-28799

QNAP NAS Improper Authorization Vulnerability

CVSS

—

Sem CVSS

EPSS

78.3%

p100

KEV

SIM

31 de mar. de 2022

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d

78.3%EPSS · 30 dias78.3%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

QNAP / Network Attached Storage (NAS)

Vulnerabilidade

QNAP NAS Improper Authorization Vulnerability

Adicionado ao KEV

31 de mar. de 2022

Corrigir até

21 de abr. de 2022

Uso conhecido em ransomware

Sim

Descrição resumida

QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-28799

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2018-199536.1 MÉD

KEV—79QNAP NAS File Station Cross-Site Scripting Vulnerability35d CVE-2018-199499.8 CRÍ

KEV—79QNAP NAS File Station Command Injection Vulnerability35d CVE-2018-199438.0 ALT

KEV—79QNAP NAS File Station Cross-Site Scripting Vulnerability85d