CVE-2021-44055
Assigner: qnap
Published: 2022-05-06T00:00:00
State: PUBLISHED
affected: product: Video Station
vendor: QNAP Systems Inc.
versions: lessThan: 5.5.9 ( 2022/02/16 )
status: affected
version: unspecified
versionType: custom
credits: value: Thomas Fady
datePublic: 2022-05-06T00:00:00
descriptions: value: An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote attackers to access data or perform actions that they should not be allowed to perform. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 ( 2022/02/16 ) and later
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-862
description: CWE-862
type: CWE
solutions: value: We have already fixed this vulnerability in the following versions of Video Station:
Video Station 5.5.9 ( 2022/02/16 ) and later

source: advisory: QSA-22-14
discovery: EXTERNAL
title: Information leakage in Video Station
x_generator: engine: Vulnogram 0.0.9