← voltar
CVE-2020-2504

Absolute path traversal vulnerability in QES

CVSS 5.8 MEDIUMEPSS 1.0%CWE-20CWE-22CWE-284CWE-73
If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Produtos afetados
QNAP Systems Inc. · QES

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://www.qnap.com/zh-tw/security-advisory/qsa-20-17