Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-34345

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage Expansion 1.0.6 ( 2021/08/03 ) and later

Published

2021-09-10T04:15:18.620

Last Modified

2024-11-21T06:10:12.663

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Secondary
    CWE-787
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qnap ej1600_firmware < 1.0.6 Yes
Hardware qnap ej1600 - No
Operating System qnap tl-r1620sdc_firmware < 1.0.6 Yes
Hardware qnap tl-r1620sdc - No
Operating System qnap tl-r1620sep-rp_firmware < 1.0.6 Yes
Hardware qnap tl-r1620sep-rp - No
Operating System qnap tl-r1220sep-rp_firmware < 1.0.6 Yes
Hardware qnap tl-r1220sep-rp - No
Operating System qnap tl-d1600s_firmware < 1.0.6 Yes
Hardware qnap tl-d1600s - No
Operating System qnap tl-d800s_firmware < 1.0.6 Yes
Hardware qnap tl-d800s - No
Operating System qnap tl-d400s_firmware < 1.0.6 Yes
Hardware qnap tl-d400s - No
Operating System qnap tl-r1200s-rp_firmware < 1.0.6 Yes
Hardware qnap tl-r1200s-rp - No
Operating System qnap tl-r400s_firmware < 1.0.6 Yes
Hardware qnap tl-r400s - No
Operating System qnap tl-r1200c-rp_firmware < 1.0.6 Yes
Hardware qnap tl-r1200c-rp - No
Operating System qnap tl-d800c_firmware < 1.0.6 Yes
Hardware qnap tl-d800c - No
Operating System qnap tr-004_firmware < 1.0.6 Yes
Hardware qnap tr-004 - No
Operating System qnap tr-002_firmware < 1.0.6 Yes
Hardware qnap tr-002 - No
Operating System qnap tr-004u_firmware < 1.0.6 Yes
Hardware qnap tr-004u - No
References