VYPR
← All advisories
Medium severity5.8NVD Advisory· Published Dec 24, 2020· Updated Jun 17, 2026

CVE-2020-2504

CVE-2020-2504

Description

If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Qnap/File Stationllm-fuzzy
    Range: >= QES 2.1.1 Build 20201006
  • QNAP Systems Inc./QESv5
    Range: unspecified
  • Qnap/QES8 versions
    cpe:2.3:a:qnap:qes:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:qnap:qes:*:*:*:*:*:*:*:*range: <2.1.1
    • cpe:2.3:a:qnap:qes:2.1.1:-:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200211:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200303:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200319:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200424:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200515:*:*:*:*:*:*
    • cpe:2.3:a:qnap:qes:2.1.1:build_20200811:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.