Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:qts:4.5.2:*:*:*:*:*:*:*

part: o version: 4.5.2 update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQts (9004baf2-b431-53ba-b074-38fcdcfcd981)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28812 not_vulnerable 2026-06-08 05:31:24.927669 Command Injection Vulnerability in Video Station
HIGH (8.8)
A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station versions prior to 5.5.4 on QTS 4.5.2; versions prior to 5.5.4 on QuTS hero h4.5.2; versions prior to 5.5.4 on QuTScloud c4.5.4. This issue does not affect: QNAP Systems Inc. Video Station on QTS 4.3.6; on QTS 4.3.3.
Published: 2021-06-03T02:45:14.642Z
Updated: 2024-09-16T20:11:39.918Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28799 not_vulnerable 2026-06-08 05:31:24.897313 Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)
CRITICAL (10)
An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to v3.0.210412 on QTS 4.3.6; versions prior to v3.0.210411 on QTS 4.3.4; versions prior to v3.0.210411 on QTS 4.3.3; versions prior to v16.0.0419 on QuTS hero h4.5.1; versions prior to v16.0.0419 on QuTScloud c4.5.1~c4.5.4. This issue does not affect: QNAP Systems Inc. HBS 2 . QNAP Systems Inc. HBS 1.3 .
Published: 2021-05-13T02:55:13.827Z
Updated: 2025-10-21T23:25:45.551Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.