VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 10, 2021· Updated Sep 17, 2024

Insufficiently Protected Credentials Vulnerability in QSW-M2116P-2T2S and QuNetSwitch

CVE-2021-28813

Description

A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism.We have already fixed this vulnerability in the following versions: QSW-M2116P-2T2S 1.0.6 build 210713 and later QGD-1600P: QuNetSwitch 1.0.6.1509 and later QGD-1602P: QuNetSwitch 1.0.6.1509 and later QGD-3014PT: QuNetSwitch 1.0.6.1519 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Qnap/QSW-M2116P-2T2Sllm-create
    Range: < 1.0.6 build 210713
  • QuNetSwitch/QuNetSwitchllm-fuzzy
    Range: < 1.0.6.1509 for QGD-1600P and QGD-1602P; < 1.0.6.1519 for QGD-3014PT
  • QNAP Systems Inc./QSW-M2116P-2T2Sv5
    Range: unspecified
  • QNAP Systems Inc./QuNetSwitchv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.