CVE-2021-44056: high-severity vulnerability in QNAP Systems Inc. Video Station
Improper authentication in Video Station
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.1epss 0.9%
An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 and later Video Station 5.3.13 and later Video Station 5.1.8 and later
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Affected products
QNAP Systems Inc. · Video StationRelated CVEs — QNAP Systems Inc. Video Station
In the same product, most dangerous first.
CVE-2021-28812HIGHCommand Injection Vulnerability in Video StationEPSS 1.6%CVE-2023-41288HIGHVideo StationEPSS 1.1%CVE-2021-44055MEDIUMInformation leakage in Video StationEPSS 1.1%CVE-2023-47563HIGHVideo StationEPSS 1.0%CVE-2023-34976CRITICALVideo StationEPSS 0.6%CVE-2023-41287MEDIUMVideo StationEPSS 0.5%