CVE-2021-38693

🗓️ 05 May 2022 16:50:19Reported by qnapType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 107 Views

CVE-2021-38693 - Path traversal vulnerability in QNAP device

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the QTS operating system, specifically the QuTS Hero operating system, is related to deficiencies in pathname restriction, which allows attackers to compromise the confidentiality of information.	8 Jul 202200:00	–	bdu_fstec
CNNVD	QNAP 多款产品路径遍历漏洞	5 May 202200:00	–	cnnvd
Cvelist	CVE-2021-38693 Path Traversal in thttpd	5 May 202216:50	–	cvelist
EUVD	EUVD-2021-25132	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in QNAP QTS, QuTS hero and QuTScloud	6 May 202200:00	–	ncsc
NVD	CVE-2021-38693	5 May 202217:15	–	nvd
OpenVAS	QNAP QTS Path Traversal Vulnerability (QSA-22-13)	9 May 202200:00	–	openvas
OpenVAS	QNAP QuTS hero Path Traversal Vulnerability (QSA-22-13)	30 May 202200:00	–	openvas
OpenVAS	QNAP QuTScloud Path Traversal Vulnerability (QSA-22-13)	30 May 202200:00	–	openvas
OSV	CVE-2021-38693	5 May 202217:15	–	osv

NVD

Node

qnap qtsRange<4.5.4.1991

qnap qtsRange5.0.0.1716–5.0.0.1986

qnap quts_heroRangeh5.0.0.1772–h5.0.0.1949

qnap qutscloudRange<c5.0.1.1949

[
  {
    "product": "QuTScloud",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "c5.0.1.1949",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "QuTS hero",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "h5.0.0.1949 build 20220215",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "h4.5.4.1951 build 20220218",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "QTS",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "5.0.0.1986 build 20220324",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.4.1991 build 20220329",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]