CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-26620

An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attackers are able to steal important information in the server by exploiting vulnerabilities such as insufficient authentication when accessing the shared folder and changing user’s passwords.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.8%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2021-26620

Iptime » Nas-I » Version: N/A

cpe:2.3:h:iptime:nas-i:-
Iptime » Nas-Ii » Version: N/A

cpe:2.3:h:iptime:nas-ii:-
Iptime » Nas-Iie » Version: N/A

cpe:2.3:h:iptime:nas-iie:-
Iptime » Nas101 » Version: N/A

cpe:2.3:h:iptime:nas101:-
Iptime » Nas1dual » Version: N/A

cpe:2.3:h:iptime:nas1dual:-
Iptime » Nas2dual » Version: N/A

cpe:2.3:h:iptime:nas2dual:-
Iptime » Nas3 » Version: N/A

cpe:2.3:h:iptime:nas3:-
Iptime » Nas4 » Version: N/A

cpe:2.3:h:iptime:nas4:-
Iptime » Nas4dual » Version: N/A

cpe:2.3:h:iptime:nas4dual:-
Iptime » Nas-I Firmware » Version: Any

cpe:2.3:o:iptime:nas-i_firmware:*
Iptime » Nas-Ii Firmware » Version: Any

cpe:2.3:o:iptime:nas-ii_firmware:*
Iptime » Nas-Iie Firmware » Version: Any

cpe:2.3:o:iptime:nas-iie_firmware:*
Iptime » Nas101 Firmware » Version: Any

cpe:2.3:o:iptime:nas101_firmware:*
Iptime » Nas1dual Firmware » Version: Any

cpe:2.3:o:iptime:nas1dual_firmware:*
Iptime » Nas2dual Firmware » Version: Any

cpe:2.3:o:iptime:nas2dual_firmware:*
Iptime » Nas3 Firmware » Version: Any

cpe:2.3:o:iptime:nas3_firmware:*
Iptime » Nas4 Firmware » Version: Any

cpe:2.3:o:iptime:nas4_firmware:*
Iptime » Nas4dual Firmware » Version: Any

cpe:2.3:o:iptime:nas4dual_firmware:*

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-26620

Products

Pricing

Contact Us