Qnap QES Use of Hard-coded Credentials (CVE-2020-2499)

A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could allow attackers to log in with a hard-coded password. QNAP has already fixed the issue in QES 2.1.1 Build 20200515 and later. This plugin only works with Tenable.ot...

CVE-2020-2499 Hard-coded Password Vulnerability in QES

A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could allow attackers to log in with a hard-coded password. QNAP has already fixed the issue in QES 2.1.1 Build 20200515 and later...

CVE-2020-2499

CVE-2020-2499 affects QNAP QES prior to 2.1.1 Build 20200515, due to a hard-coded credential in earlier QES releases. The issue could allow login with the hard-coded password. QNAP fixed the vulnerability in QES 2.1.1 Build 20200515 and later. Based on connected sources (NVD/Nessus plugin and rel...