Known vulnerabilities in QNAP QTS 4.2.6 build 20190921 - page 2

Software: QNAP QTS
Version: 4.2.6 build 20190921
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 29
Public exploits: 8
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting QNAP QTS version 4.2.6 build 20190921 QNAP QTS 4.2.6 build 20190921 is affected by 29 vulnerabilities: 12 high, 13 medium, 4 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28117 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2019-7195
CWE-610 High
Public exploit available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU28116 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2019-7194
CWE-610 High
Public exploit available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU28115 - Improper input validation
CVE-2019-7193
CWE-20 High
Public exploit available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU28114 - Improper Access Control
CVE-2019-7192
CWE-284 High
Public exploit available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU26104 - NULL Pointer Dereference
CVE-2019-19269
CWE-476 Medium
No
No
4.2.6 20200821, 4.3.3.1386 20200821, 4.3.6.1411 20200825, 4.4.3.1400 20200817 17.03.2020 SB2020022519
SB2020031705
SB2020083115
and 5 more
#VU30580 - Improper Certificate Validation
CVE-2019-19271
CWE-295 Medium
No
No
4.2.6 20200821, 4.3.3.1386 20200821, 4.3.6.1411 20200825, 4.4.3.1400 20200817 26.11.2019 SB2019112628
SB2020083115
SB2019112925
#VU30581 - NULL Pointer Dereference
CVE-2019-19272
CWE-476 Medium
No
No
4.2.6 20200821, 4.3.3.1386 20200821, 4.3.6.1411 20200825, 4.4.3.1400 20200817 26.11.2019 SB2019112628
SB2020083115
SB2019112925
#VU35035 - Improper Certificate Validation
CVE-2019-19270
CWE-295 Medium
No
No
4.2.6 20200821, 4.3.3.1386 20200821, 4.3.6.1411 20200825, 4.4.3.1400 20200817 26.11.2019 SB2016040501
SB2020083115
SB2020011349
and 3 more
#VU22564 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-18217
CWE-835 Medium
No
No
4.2.6 20200821, 4.3.3.1386 20200821, 4.3.6.1411 20200825, 4.4.3.1400 20200817 06.11.2019 SB2019110639
SB2019110640
SB2020021217
and 8 more


Showing elements 21 - 40 out of 29