Threat Investigation
Request a demo

CVE-2021-38688

High

Description

An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following versions of Qfile: Qfile 3.0.0.1105 and later

SeverityHigh
CVSS7.1
Exploit probability—
ProductQnap Qfile
PublishedDec 29, 2021
First seenDec 29, 2021
Weakness typeCWE-287Improper authentication

How to fix

Update
  • qnap qfile3.0.0.1105 or later

Affected products

ProductAffected versionsFixed in
qnap qfilev < 3.0.0.11053.0.0.1105

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.