Skip to content
OpenAdvisories

Vendor

QNAP Systems

631 known vulnerabilities.

Products

QTS 253 QuTS hero 235 Qsync Central 69 QuTScloud 66 File Station 5 58 Photo Station 22 Video Station 19 QuMagie 15 QuRouter 15 Music Station 10 Notes Station 3 10 Media Streaming Add-on 9 Helpdesk 9 QVR 8 QuLog Center 8 Q'center Virtual Appliance 7 License Center 6 HBS 3 Hybrid Backup Sync 6 QVR Pro 6 Download Station 6 QES 6 QuNetSwitch 5 QVR Elite 5 QVR Guard 5 Multimedia Console 5 QcalAgent 5 QNAP QTS 4 QNAP Media Streaming Add-On 4 QVPN Windows 3 QuFirewall 3 HybridDesk Station 3 Proxy Server 3 Surveillance Station 3 QTS Password function 2 QuFTP Service 2 QTS Login function 2 Notification Center 2 QmailAgent 2 VioStor 2 HBS 3 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2022-27593 Exploited · Ransomware Scanner template EPSS 88%

    DeadBolt Ransomware

    An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QT…

    QNAP Systems Photo Station
    KEV Sep 8, 2022
  • Critical 10.0
    CVE-2021-28799 Exploited · Ransomware Scanner template EPSS 78%

    Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)

    An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.…

    QNAP Systems HBS 3 HBS 2 HBS 1.3
    KEV Mar 31, 2022
  • Critical 9.8
    CVE-2020-2509 Exploited Public exploit EPSS 34%

    Command Injection Vulnerability in QTS and QuTS hero

    A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: …

    QNAP Systems QTS QuTS hero
    KEV Apr 11, 2022
  • Critical 9.8
    CVE-2018-19949 Exploited · Ransomware EPSS 30%

    If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has alr…

    QNAP Systems QTS
    KEV May 24, 2022