VULNERABILITY INTELLIGENCE

CVE-2021-26620

CVSS score7.5 HIGH
EPSS probability1.35%
CISA KEVNot currently listed
Published2022-03-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attackers are able to steal important information in the server by exploiting vulnerabilities such as insufficient authentication when accessing the shared folder and changing user’s passwords.

Weakness classification

  • vuln@krcert.or.kr: CWE-287
  • nvd@nist.gov: CWE-287

Primary references