CVE-2021-26620

The CVE-2021-26620 entry describes an improper authentication vulnerability in iptime NAS2dual. The issue allows remote attackers to access a shared folder and alter a user’s password due to insufficient authentication, enabling potential information leakage. Reported impacts include exposure of ...

CVE-2020-7847

The CVE-2020-7847 entry concerns ipTIME NAS (pTIME NAS 1.4.36) with an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature that can lead to remote code execution. The connected Red Hat and NVD records confirm the same issue; however, exploitation details and concrete exploi...