Iptime Nas1dual Firmware
4 CVEs affecting Iptime Nas1dual Firmware. Latest disclosed: 2022-10-17. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23771 | High | 8.0 | 2022-10-17 | This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of valid… |
CVE-2022-23765 | High | 8.0 | 2022-08-17 | This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers… |
CVE-2021-26620 | High | 7.5 | 2022-03-25 | An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attackers are able to steal important informa… |
CVE-2020-7847 | High | 7.4 | 2021-02-23 | The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code executi… |