CVE-2021-38688highCWE-287

CVE-2021-38688: high-severity vulnerability in QNAP Systems Inc. Qfile

Improper Authentication in Qfile

Published · Updated

Follow this CVE+ Monitor Qfile

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.8%
An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following versions of Qfile: Qfile 3.0.0.1105 and later
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
QNAP Systems Inc. · Qfile