Known vulnerabilities in QNAP QTS 4.3.6.1411 Build 20200825 - page 2

Software: QNAP QTS
Version: 4.3.6.1411 Build 20200825
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 31
Public exploits: 6
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting QNAP QTS version 4.3.6.1411 Build 20200825 QNAP QTS 4.3.6.1411 Build 20200825 is affected by 31 vulnerabilities: 1 critical, 12 high, 13 medium, 5 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61621 - Out-of-bounds read
CVE-2022-23123
CWE-125 Medium
No
No
4.5.4.2012 20220419 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 6 more
#VU61620 - Improper Handling of Exceptional Conditions
CVE-2022-23121
CWE-755 High
No
No
4.5.4.2012 20220419 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 7 more
#VU61619 - Stack-based buffer overflow
CVE-2022-23125
CWE-121 High
No
No
4.5.4.2012 20220419 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 6 more
#VU61618 - Stack-based buffer overflow
CVE-2022-23122
CWE-121 High
No
No
4.5.4.2012 20220419 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 5 more
#VU56436 - Stack-based buffer overflow
CVE-2021-34343
CWE-121 High
No
No
4.3.3.1693 20210624, 4.3.6.1750 20210730, 5.0.0.1716 20210701 09.09.2021 SB2021090917
#VU56435 - Stack-based buffer overflow
CVE-2021-28816
CWE-121 High
No
No
4.3.3.1693 20210624, 4.3.6.1750 20210730, 5.0.0.1716 20210701 09.09.2021 SB2021090917
#VU52802 - Heap-based Buffer Overflow
CVE-2021-31439
CWE-122 Medium
No
No
4.5.4.2012 20220419 03.05.2021 SB2021050308
SB2022042577
SB2022042578
and 6 more
#VU52762 - Command injection
CVE-2021-28800
CWE-77 High
No
No
4.3.3.1624 20210416, 4.3.6.1663 20210504, 4.5.3.1652 20210428 29.04.2021 SB2021042927
#VU51880 - Improper Access Control
CWE-284 Critical
No
No
- 02.04.2021 SB2021040202
#VU51879 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-2509
CWE-78 High
Public exploit available
Exploited
4.3.6.1620 20210322 02.04.2021 SB2021040201
#VU35880 - Improper input validation
CVE-2020-9490
CWE-20 Medium
No
No
4.3.6.1620 20210322 08.08.2020 SB2020080806
SB2020080807
SB2020082904
and 17 more


Showing elements 21 - 40 out of 31