VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Dec 24, 2020· Updated Jun 17, 2026

CVE-2020-2499

CVE-2020-2499

Description

A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could allow attackers to log in with a hard-coded password. QNAP has already fixed the issue in QES 2.1.1 Build 20200515 and later.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Qnap/QES7 versions
    cpe:2.3:a:qnap:qes:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:qnap:qes:*:*:*:*:*:*:*:*range: <2.1.1
    • cpe:2.3:a:qnap:qes:2.1.1:-:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200211:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200303:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200319:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200424:*:*:*:*:*:*
    • (no CPE)range: <2.1.1 Build 20200515
  • QNAP Systems Inc./QESv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.