CVE-2021-28806

A DOM-based XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.3.1652 Build 20210428. QNAP Systems Inc. QuTS hero versions prior to h4.5.2.1638 Build 20210414. QNAP Systems Inc. QuTScloud versions prior to c4.5.5.1656 Build 20210503. This issue does not affect: QNAP Systems Inc. QTS 4.3.6; 4.3.3.

CVSS v3 5.4 MEDIUM
CVSS v2.0 3.5 LOW

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://www.qnap.com/zh-tw/security-advisory/qsa-21-22	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:qnap:qutscloud:*:*:*:*:*:*:*:*

History

09 Jun 2021, 19:56

Type	Values Removed	Values Added
CWE		CWE-79
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : 3.5 v3 : 5.4
References	~~(MISC) https://www.qnap.com/zh-tw/security-advisory/qsa-21-22 -~~	(MISC) https://www.qnap.com/zh-tw/security-advisory/qsa-21-22 - Vendor Advisory
CPE		cpe:2.3:o:qnap:qts:::::::: cpe:2.3:o:qnap:quts_hero:::::::: cpe:2.3:o:qnap:qutscloud::::::::

03 Jun 2021, 03:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2021-06-03 03:15

Updated : 2023-12-10 13:55

NVD link : CVE-2021-28806

Mitre link : CVE-2021-28806

CVE.ORG link : CVE-2021-28806

JSON object : View

Products Affected

qnap

quts_hero
qutscloud
qts

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2021-28806", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}, {"type": "Secondary", "source": "security@qnapsecurity.com.tw", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.1}]}, "published": "2021-06-03T03:15:08.437", "references": [{"url": "https://www.qnap.com/zh-tw/security-advisory/qsa-21-22", "tags": ["Vendor Advisory"], "source": "security@qnapsecurity.com.tw"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "security@qnapsecurity.com.tw", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "A DOM-based XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.3.1652 Build 20210428. QNAP Systems Inc. QuTS hero versions prior to h4.5.2.1638 Build 20210414. QNAP Systems Inc. QuTScloud versions prior to c4.5.5.1656 Build 20210503. This issue does not affect: QNAP Systems Inc. QTS 4.3.6; 4.3.3."}, {"lang": "es", "value": "Se ha reportado una vulnerabilidad de tipo XSS basada en DOM que afecta a los NAS de QNAP que ejecutan QTS y QuTS hero. Si es explotada, esta vulnerabilidad permite a los atacantes inyectar c\u00f3digo malicioso. Este problema afecta: QNAP Systems Inc. QTS versiones anteriores a 4.5.3.1652 Build 20210428. QNAP Systems Inc. QuTS hero versiones anteriores a h4.5.2.1638 Build 20210414. QNAP Systems Inc. versiones de QuTScloud anteriores a versi\u00f3n c4.5.5.1656 Build 20210503. Este problema no afecta: QNAP Systems Inc. QTS versiones 4.3.6; 4.3.3"}], "lastModified": "2021-06-09T19:56:53.927", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "489F84DA-67B3-473F-9542-196F0D16D699", "versionEndExcluding": "4.5.3.1652"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADA7C3AF-799D-4A93-AA53-EBDCC7967F04", "versionEndExcluding": "h4.5.2.1638"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qnap:qutscloud:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C0BA9F4-E645-4697-AD4C-1415BA77BE26", "versionEndExcluding": "c4.5.5.1656"}], "operator": "OR"}]}], "sourceIdentifier": "security@qnapsecurity.com.tw"}