QNAP Qss vulnerabilities

2 CVEs affecting QNAP Qss, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-28805, published 2021-06-11.

More from QNAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-28801, published 2021-06-11. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This…
• CVE-2021-28805, published 2021-06-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This…