QNAP Qvpn vulnerabilities

3 CVEs affecting QNAP Qvpn, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-27595, published 2024-12-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-27595, published 2024-12-19. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local attackers who have gained user access to execute…
CVE-2023-23370, published 2023-10-06. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. An insufficiently protected credentials vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to gain access to…
CVE-2023-23371, published 2023-10-06. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read…