Skip to content
OpenAdvisories

Product · QNAP Systems

QES

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.6
    CVE-2023-23355

    QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVR

    An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote authenticated administrators to execute commands via unspecified vectors. QES is not affected. We have already fix…

    QNAP Systems QTS QuTS hero QuTScloud
  • Medium 5.8
    CVE-2020-2504

    Absolute path traversal vulnerability in QES

    If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

    QNAP Systems QES
  • Medium 6.3
    CVE-2020-2499

    Hard-coded Password Vulnerability in QES

    A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could allow attackers to log in with a hard-coded password. QNAP has already fixed the issue in QES 2.1.1 Build 20200515 and later.

    QNAP Systems QES