Read the docs
TI-2021-09789 Aliases CVE-2021-28797GHSA-w8vr-fx3m-jhr5

Stack Buffer Overflow in Surveillance Station

Priority MEDIUM 51CWE-121Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. QNAP have already fixed this vulnerability in the following versions: Surveillance Station 5.1.5.4.3 (and later) for ARM CPU NAS (64bit OS) and x86 CPU NAS (64bit OS) Surveillance Station 5.1.5.3.3 (and later) for ARM CPU NAS (32bit OS) and x86 CPU NAS (32bit OS)

Why it matters now

EPSS 0.05909 93rd percentileScored 2026-11-07
Fix Fixed Surveillance Station (QNAP Systems Inc.): 5.1.5.4.3, 5.1.5.3.3

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
QNAPSurveillance Stationbefore 5.1.5.4.35.1.5.4.3Patch availableCNA
QNAPSurveillance Stationbefore 5.1.5.3.35.1.5.3.3Patch availableCNA
  • Surveillance Station VendorQNAP Affected before 5.1.5.4.3 Fixed in 5.1.5.4.3 Patch available CNA
  • Surveillance Station VendorQNAP Affected before 5.1.5.3.3 Fixed in 5.1.5.3.3 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:qnap:surveillance_station:*:*:*:*:*:*:*:*before 5.1.5.3.3; 5.1.5.4.0 to before 5.1.5.4.3VulnerableQNAP
cpe:2.3:h:qnap:nas:-:*:*:*:*:*:*:*not specified by NVDRunning onQNAP
  • cpe:2.3:a:qnap:surveillance_station:*:*:*:*:*:*:*:* Versions before 5.1.5.3.3; 5.1.5.4.0 to before 5.1.5.4.3 Vulnerable ·QNAP
  • cpe:2.3:h:qnap:nas:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·QNAP

Remediation

  • Fix · CNA Surveillance Station (QNAP Systems Inc.) Fixed in 5.1.5.4.3
  • Fix · CNA Surveillance Station (QNAP Systems Inc.) Fixed in 5.1.5.3.3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-28797
  2. 2026-10-03 Alias added: GHSA-w8vr-fx3m-jhr5

References

Advisory 1

  • TI-2020-02213 Stack Buffer Overflow in Surveillance Station CVSS 3.1CRITICAL 9.8
  • TI-2021-16258 Stack Overflow Vulnerability in Surveillance Station CVSS 3.1CRITICAL 9.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences