medium6.3
CVE-2020-2499
A hard-coded password vulnerability has been reported to affect earlier versions of QES.
Impact
A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could allow attackers to log in with a hard-coded password. QNAP has already fixed the issue in QES 2.1.1 Build 20200515 and later.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qnap | Qes | before 2.1.1 Version 2.1.1 |