Approved changes feed: RSS · Atom

cpe:2.3:a:qnap_systems_inc.:qss:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQnap Systems Inc. (1f66ac1e-0889-51bf-b27f-24c7175e5920)
ProductQss (d6ab864c-2fa6-571c-af88-8f462b80ab87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28805 vulnerable 2026-06-03 14:44:18.797386 Inclusion of Sensitive Information in QSS
HIGH (7.8)
Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versions prior to 1.0.3 build 20210505 on QSW-M2108-2S; versions prior to 1.0.3 build 20210505 on QSW-M2108R-2C; versions prior to 1.0.12 build 20210506 on QSW-M408.
Published: 2021-06-11T06:35:15.074Z
Updated: 2024-09-17T04:19:06.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28801 vulnerable 2026-06-03 14:44:18.782879 Out-of-Bounds Read Vulnerability in QSS
LOW (3.1)
An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C; versions prior to 1.0.2 build 20210122 on QSW-M2108-2S; versions prior to 1.0.2 build 20210122 on QSW-M2108R-2C.
Published: 2021-06-11T06:35:14.369Z
Updated: 2024-09-17T00:06:25.170Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.