CVE-2021-44055: medium-severity vulnerability in QNAP Systems Inc. Video Station
Information leakage in Video Station
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 1.1%
An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote attackers to access data or perform actions that they should not be allowed to perform. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 ( 2022/02/16 ) and later
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
QNAP Systems Inc. · Video StationRelated CVEs — QNAP Systems Inc. Video Station
In the same product, most dangerous first.
CVE-2021-28812HIGHCommand Injection Vulnerability in Video StationEPSS 1.6%CVE-2023-41288HIGHVideo StationEPSS 1.1%CVE-2023-47563HIGHVideo StationEPSS 1.0%CVE-2021-44056HIGHImproper authentication in Video StationEPSS 0.9%CVE-2023-34976CRITICALVideo StationEPSS 0.6%CVE-2023-41287MEDIUMVideo StationEPSS 0.5%