CVE-2018-19944 Cleartext Transmission of Sensitive Information in SNMP

2020-12-3000:00:00

CWE-311

CWE-319

qnap

www.cve.org

0.003 Low

EPSS

Percentile

68.0%

JSON

A cleartext transmission of sensitive information vulnerability has been reported to affect certain QTS devices. If exploited, this vulnerability allows a remote attacker to gain access to sensitive information. QNAP have already fixed this vulnerability in the following versions: QTS 4.4.3.1354 build 20200702 (and later)

CNA Affected

[
  {
    "platforms": [
      "build 20200702"
    ],
    "product": "QTS",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "4.4.3.1354",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.qnap.com/zh-tw/security-advisory/qsa-20-22

0.003 Low

EPSS

Percentile

68.0%

JSON

Related for CVELIST:CVE-2018-19944