VYPR
← All advisories
Critical severity9.6NVD Advisory· Published Sep 10, 2021· Updated Jun 17, 2026

CVE-2021-28813

CVE-2021-28813

Description

A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism.We have already fixed this vulnerability in the following versions: QSW-M2116P-2T2S 1.0.6 build 210713 and later QGD-1600P: QuNetSwitch 1.0.6.1509 and later QGD-1602P: QuNetSwitch 1.0.6.1509 and later QGD-3014PT: QuNetSwitch 1.0.6.1519 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Qnap/QuNetSwitch2 versions
    cpe:2.3:a:qnap:qunetswitch:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:qnap:qunetswitch:*:*:*:*:*:*:*:*range: <1.0.6.1509
    • (no CPE)range: 1.0.6.1509 and later, 1.0.6.1519 and later
  • Qnap/Qsw M2116p 2t2s Firmware
    cpe:2.3:o:qnap:qsw-m2116p-2t2s_firmware:*:*:*:*:*:*:*:*
    Range: <1.0.6
  • Qnap/QSW-M2116P-2T2Sllm-fuzzy
    Range: 1.0.6 build 210713 and later
  • QNAP Systems Inc./QSW-M2116P-2T2Sv5
    Range: unspecified
  • QNAP Systems Inc./QuNetSwitchv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.