QNAP Surveillance Station vulnerabilities

3 CVEs affecting QNAP Surveillance Station, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-38687, published 2021-12-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-28797, published 2021-04-14. Critical severity, CVSS 9.8. EPSS: 5.9% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code.…
CVE-2020-2501, published 2021-02-17. Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code.…
CVE-2021-38687, published 2021-12-29. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already…