CVE-2018-19944
High
Description
A cleartext transmission of sensitive information vulnerability has been reported to affect certain QTS devices. If exploited, this vulnerability allows a remote attacker to gain access to sensitive information. QNAP have already fixed this vulnerability in the following versions: QTS 4.4.3.1354 build 20200702 (and later)
SeverityHigh
CVSS7.5
Exploit probability—
Product
Qnap Qts
PublishedDec 31, 2020
First seenDec 31, 2020
Weakness typeCWE-311CWE-311CWE-319CWE-319
How to fix
Update
- qnap qts4.4.3.1354 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnap qts | v < 4.4.3.1354 | 4.4.3.1354 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.