CVE-2021-28797: Stack Buffer Overflow in Surveillance Station
A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. QNAP have already fixed this vulnerability in the following versions: Surveillance Station 5.1.5.4.3 (and later) for ARM CPU NAS (64bit OS) and x86 CPU NAS (64bit OS) Surveillance Station 5.1.5.3.3 (and later) for ARM CPU NAS (32bit OS) and x86 CPU NAS (32bit OS)
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-28797?
CVE-2021-28797 is a stack-based buffer overflow vulnerability that affects QNAP NAS devices running Surveillance Station.
What is the severity of CVE-2021-28797?
The severity of CVE-2021-28797 is critical with a CVSS score of 9.8.
How does CVE-2021-28797 affect QNAP NAS devices?
CVE-2021-28797 allows attackers to execute arbitrary code on QNAP NAS devices running Surveillance Station.
Has QNAP fixed CVE-2021-28797?
Yes, QNAP has already fixed CVE-2021-28797 in Surveillance Station version 5.1.5.4.3.
Where can I find more information about CVE-2021-28797?
You can find more information about CVE-2021-28797 on the QNAP security advisory page at [https://www.qnap.com/en/security-advisory/qsa-21-07](https://www.qnap.com/en/security-advisory/qsa-21-07).