VULNERABILITY INTELLIGENCE

CVE-2021-38686

CVSS score8.8 HIGH
EPSS probability0.97%
CISA KEVNot currently listed
Published2021-11-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later

Weakness classification

  • security@qnapsecurity.com.tw: CWE-287

Primary references