Exploited Vulnerabilities DailyCVE-2020-2509: QNAP QNAP Network-Attached Storage (NAS)
EPSS33.9%No. 976 of 1739 in KEV
CVE year2020~2 yrs before listing
Same vendor in KEV11
Same product1
| Field | Value |
|---|---|
| Vendor | QNAP |
| Product | QNAP Network-Attached Storage (NAS) |
| Name | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability |
| Added to KEV | 2022-04-11 |
| US federal due date | 2022-05-02 |
| Ransomware use | Unknown |
| CWE | CWE-77, CWE-78 |
CISA description
QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A QNAP QNAP Network-Attached Storage (NAS) vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2022-04-11.