Read the docs

EFM

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

EFM records in CISA KEV

No EFM vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
A8004t Firmware 4 records MEDIUM Nas1dual Firmware 4 records MEDIUM Nas2dual Firmware 4 records MEDIUM Nas4dual Firmware 4 records MEDIUM C200 Firmware 3 records MEDIUM Ax2004m Firmware 2 records MEDIUM Nas-i Firmware 2 records LOW Nas-ii Firmware 2 records LOW

Records

2 records in Nas-i Firmware · all components

TI-2021-08338 CVE-2021-26620 · GHSA-cc72-grgq-wvmx

IPTIME NAS2dual improper authentication vulnerability

Priority LOW 36

An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0135 Published 2022-03-25 Fixed in 1.4.82 CWE-287
TI-2020-06355 CVE-2020-7847 · GHSA-vwm9-4mjh-m96x

Unrestricted file upload in EFM ipTIME NAS

Priority LOW 35

The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00525 Published 2021-02-23 No fix listed CWE-434
Open these records in search →