CVE-2021-28813
Critical
Description
A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism.We have already fixed this vulnerability in the following versions: QSW-M2116P-2T2S 1.0.6 build 210713 and later QGD-1600P: QuNetSwitch 1.0.6.1509 and later QGD-1602P: QuNetSwitch 1.0.6.1509 and later QGD-3014PT: QuNetSwitch 1.0.6.1519 and later
SeverityCritical
CVSS9.6
Exploit probability—
Product
Qnap Qsw-m2116p-2t2s Firmware
PublishedSep 10, 2021
First seenSep 10, 2021
How to fix
Update
- qnap qsw-m2116p-2t2s_firmware1.0.6 or later
- qnap qunetswitch1.0.6.1509 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnap qsw-m2116p-2t2s_firmware | v < 1.0.6 | 1.0.6 |
| qnap qunetswitch | v < 1.0.6.1509 | 1.0.6.1509 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.