CVE-2021-28801 - OpenCVE

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C; versions prior to 1.0.2 build 20210122 on QSW-M2108-2S; versions prior to 1.0.2 build 20210122 on QSW-M2108R-2C.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

AV:N/AC:L/Au:N/C:P/I:N/A:N

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Qnap	Qss Qsw-m2108-2c Qsw-m2108-2s Qsw-m2108r-2c

Configuration 1 [-]

AND

cpe:2.3:a:qnap:qss:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:qnap:qsw-m2108-2c:-:::::::*
	cpe:2.3:h:qnap:qsw-m2108-2s:-:::::::*
	cpe:2.3:h:qnap:qsw-m2108r-2c:-:::::::*

No data.

References

Link	Providers
https://www.qnap.com/zh-tw/security-advisory/qsa-21-23

History

No history.

MITRE

Status: PUBLISHED

Assigner: qnap

Published: 2021-06-11T06:35:14.369676Z

Updated: 2024-09-17T00:06:25.170Z

Reserved: 2021-03-18T00:00:00

Link: CVE-2021-28801

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2021-06-11T07:15:06.490

Modified: 2021-06-23T14:24:22.717

Link: CVE-2021-28801

Redhat

No data.

{"containers": {"cna": {"affected": [{"platforms": ["QSW-M2108-2C"], "product": "QSS", "vendor": "QNAP Systems Inc.", "versions": [{"lessThan": "1.0.2 build 20210122", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"platforms": ["QSW-M2108-2S"], "product": "QSS", "vendor": "QNAP Systems Inc.", "versions": [{"lessThan": "1.0.2 build 20210122", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"platforms": ["QSW-M2108R-2C"], "product": "QSS", "vendor": "QNAP Systems Inc.", "versions": [{"lessThan": "1.0.2 build 20210122", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Qian Chen from Codesafe Team of Legendsec at Qi'anxin Group"}], "datePublic": "2021-06-11T00:00:00", "descriptions": [{"lang": "en", "value": "An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C; versions prior to 1.0.2 build 20210122 on QSW-M2108-2S; versions prior to 1.0.2 build 20210122 on QSW-M2108R-2C."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-06-11T06:35:14", "orgId": "2fd009eb-170a-4625-932b-17a53af1051f", "shortName": "qnap"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.qnap.com/zh-tw/security-advisory/qsa-21-23"}], "solutions": [{"lang": "en", "value": "QNAP have already fixed this vulnerability in the following versions:\n\nQSW-M2108-2C: QSS 1.0.2 build 20210122 and later\nQSW-M2108-2S: QSS 1.0.2 build 20210122 and later\nQSW-M2108R-2C: QSS 1.0.2 build 20210122 and later"}], "source": {"advisory": "QSA-21-23", "discovery": "EXTERNAL"}, "title": "Out-of-Bounds Read Vulnerability in QSS", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@qnap.com", "DATE_PUBLIC": "2021-06-11T06:01:00.000Z", "ID": "CVE-2021-28801", "STATE": "PUBLIC", "TITLE": "Out-of-Bounds Read Vulnerability in QSS"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "QSS", "version": {"version_data": [{"platform": "QSW-M2108-2C", "version_affected": "<", "version_value": "1.0.2 build 20210122"}, {"platform": "QSW-M2108-2S", "version_affected": "<", "version_value": "1.0.2 build 20210122"}, {"platform": "QSW-M2108R-2C", "version_affected": "<", "version_value": "1.0.2 build 20210122"}]}}]}, "vendor_name": "QNAP Systems Inc."}]}}, "credit": [{"lang": "eng", "value": "Qian Chen from Codesafe Team of Legendsec at Qi'anxin Group"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C; versions prior to 1.0.2 build 20210122 on QSW-M2108-2S; versions prior to 1.0.2 build 20210122 on QSW-M2108R-2C."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-125 Out-of-bounds Read"}]}]}, "references": {"reference_data": [{"name": "https://www.qnap.com/zh-tw/security-advisory/qsa-21-23", "refsource": "MISC", "url": "https://www.qnap.com/zh-tw/security-advisory/qsa-21-23"}]}, "solution": [{"lang": "en", "value": "QNAP have already fixed this vulnerability in the following versions:\n\nQSW-M2108-2C: QSS 1.0.2 build 20210122 and later\nQSW-M2108-2S: QSS 1.0.2 build 20210122 and later\nQSW-M2108R-2C: QSS 1.0.2 build 20210122 and later"}], "source": {"advisory": "QSA-21-23", "discovery": "EXTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T21:55:11.777Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.qnap.com/zh-tw/security-advisory/qsa-21-23"}]}]}, "cveMetadata": {"assignerOrgId": "2fd009eb-170a-4625-932b-17a53af1051f", "assignerShortName": "qnap", "cveId": "CVE-2021-28801", "datePublished": "2021-06-11T06:35:14.369676Z", "dateReserved": "2021-03-18T00:00:00", "dateUpdated": "2024-09-17T00:06:25.170Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:qnap:qss:*:*:*:*:*:*:*:*", "matchCriteriaId": "DEF245FB-7B7B-4050-8261-3EFB2E3D8F15", "versionEndExcluding": "1.0.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:qnap:qsw-m2108-2c:-:*:*:*:*:*:*:*", "matchCriteriaId": "A690794E-3F9B-47DA-A365-E8F100C730E2", "vulnerable": false}, {"criteria": "cpe:2.3:h:qnap:qsw-m2108-2s:-:*:*:*:*:*:*:*", "matchCriteriaId": "21692724-A864-4CEB-898C-4E6691C403C1", "vulnerable": false}, {"criteria": "cpe:2.3:h:qnap:qsw-m2108r-2c:-:*:*:*:*:*:*:*", "matchCriteriaId": "37F5E9FC-2CE2-473F-81C1-676BCCFFBD3D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C; versions prior to 1.0.2 build 20210122 on QSW-M2108-2S; versions prior to 1.0.2 build 20210122 on QSW-M2108R-2C."}, {"lang": "es", "value": "Se ha reportado una vulnerabilidad de lectura fuera de l\u00edmites que afecta a determinados switches de QNAP que ejecutan QSS. Si es explotada, esta vulnerabilidad permite a atacantes leer informaci\u00f3n confidencial en el sistema. Este problema afecta: QNAP Systems Inc. versiones de QSS versiones anteriores a 1.0.2 build 20210122 en QSW-M2108-2C; versiones anteriores a 1.0.2 build 20210122 en QSW-M2108-2S; versiones anteriores a 1.0.2 build 20210122 en QSW-M2108R-2C"}], "id": "CVE-2021-28801", "lastModified": "2021-06-23T14:24:22.717", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 1.4, "source": "security@qnapsecurity.com.tw", "type": "Secondary"}]}, "published": "2021-06-11T07:15:06.490", "references": [{"source": "security@qnapsecurity.com.tw", "tags": ["Vendor Advisory"], "url": "https://www.qnap.com/zh-tw/security-advisory/qsa-21-23"}], "sourceIdentifier": "security@qnapsecurity.com.tw", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "security@qnapsecurity.com.tw", "type": "Primary"}]}