CVE-2021-28813: Insufficiently Protected Credentials Vulnerability in QSW-M2116P-2T2S and QuNetSwitch
A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism.We have already fixed this vulnerability in the following versions: QSW-M2116P-2T2S 1.0.6 build 210713 and later QGD-1600P: QuNetSwitch 1.0.6.1509 and later QGD-1602P: QuNetSwitch 1.0.6.1509 and later QGD-3014PT: QuNetSwitch 1.0.6.1519 and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2021-28813?
CVE-2021-28813 has been rated as a high severity vulnerability due to the potential for remote exploitation allowing unauthorized access to sensitive information.
How do I fix CVE-2021-28813?
To mitigate the CVE-2021-28813 vulnerability, update your QSW-M2116P-2T2S switch firmware and QuNetSwitch software to the latest versions available.
What systems are affected by CVE-2021-28813?
CVE-2021-28813 affects QNAP's QSW-M2116P-2T2S switches running QuNetSwitch versions prior to 1.0.6.1509.
Can CVE-2021-28813 be exploited remotely?
Yes, CVE-2021-28813 can be exploited remotely by attackers who can gain access to the unprotected storage of sensitive information.
What is the impact of exploiting CVE-2021-28813?
Exploiting CVE-2021-28813 allows attackers to read sensitive information, leading to potential data breaches or unauthorized access.