← back
CVE-2020-2504

Absolute path traversal vulnerability in QES

CVSS 5.8 MEDIUMEPSS 1.0%CWE-20CWE-22CWE-284CWE-73
If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Affected products
QNAP Systems Inc. · QES

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.qnap.com/zh-tw/security-advisory/qsa-20-17