CVE-2021-28799: QNAP NAS Improper Authorization Vulnerability. QNAP NAS
QNAP NAS Improper Authorization Vulnerability. QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.
- CISA KEV-listed (remediation due 2022-04-21)
- used in ransomware campaigns
- EPSS 92.4% (99.7% percentile)