CVE-2021-26620

🗓️ 25 Mar 2022 18:02:37Reported by krcertType

CVE-2021-26620: Improper authentication leads to information leakage in iptime NAS2dua

Reporter	Title	Published	Views	Family All 7
CNNVD	EFM ipTIME C200 IP Camera 授权问题漏洞	25 Mar 202200:00	–	cnnvd
Cvelist	CVE-2021-26620 IPTIME NAS2dual improper authentication vulnerability	25 Mar 202218:02	–	cvelist
EUVD	EUVD-2021-13414	7 Oct 202500:30	–	euvd
NVD	CVE-2021-26620	25 Mar 202219:15	–	nvd
OSV	CVE-2021-26620	25 Mar 202219:15	–	osv
Prion	Authentication flaw	25 Mar 202219:15	–	prion
RedhatCVE	CVE-2021-26620	6 Feb 202503:43	–	redhatcve

NVD

Node

iptime nas101_firmwareRange<1.4.82windows

AND

iptime nas101Match-

Node

iptime nas1dual_firmwareRange<1.4.82windows

AND

iptime nas1dualMatch-

Node

iptime nas2dual_firmwareRange<1.4.82windows

AND

iptime nas2dualMatch-

Node

iptime nas3_firmwareRange<1.4.82windows

AND

iptime nas3Match-

Node

iptime nas4_firmwareRange<1.4.82windows

AND

iptime nas4Match-

Node

iptime nas4dual_firmwareRange<1.4.82windows

AND

iptime nas4dualMatch-

Node

iptime nas-i_firmwareRange<1.4.82windows

AND

iptime nas-iMatch-

Node

iptime nas-ii_firmwareRange<1.4.82windows

AND

iptime nas-iiMatch-

Node

iptime nas-iie_firmwareRange<1.4.82windows

AND

iptime nas-iieMatch-

[
  {
    "platforms": [
      "Windows"
    ],
    "product": "ipTIME NAS product (NAS1, 2, 3, 4, 1dual, 2dual 4dual)",
    "vendor": "EFM Networks Co., Ltd",
    "versions": [
      {
        "lessThan": "1.4.82",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
krcert	www.krcert.or.kr/krcert/secNoticeView.do

21 Nov 2024 05:56Current

7.8High risk

Vulners AI Score7.8

CVSS 25

CVSS 3.17.5

EPSS0.0061

CWE-287