TI-2022-07807 CVE-2022-23771 · GHSA-whc8-p8h6-gp94
IPTIME NAS1DUAL CSRF Vulnerability
Priority MEDIUM 40
This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products.
EFM
Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
EFM records in CISA KEVNo EFM vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Nas2dual Firmware · all components
TI-2022-07801 CVE-2022-23765 · GHSA-qhhg-q8wp-jjvj
IPTIME NAS family CSRF vulnerability
Priority LOW 39
This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS.
TI-2021-08338 CVE-2021-26620 · GHSA-cc72-grgq-wvmx
IPTIME NAS2dual improper authentication vulnerability
Priority LOW 36
An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual.
TI-2020-06355 CVE-2020-7847 · GHSA-vwm9-4mjh-m96x
Unrestricted file upload in EFM ipTIME NAS
Priority LOW 35
The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution.