Inclusion of Sensitive Information in QSS
Priority LOW 34CWE-540Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.
Summary
Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versions prior to 1.0.3 build 20210505 on QSW-M2108-2S; versions prior to 1.0.3 build 20210505 on QSW-M2108R-2C; versions prior to 1.0.12 build 20210506 on QSW-M408.
Why it matters now
EPSS 0.00238 14th percentileScored 2026-11-07
Fix Fixed QSS (QNAP Systems Inc.): 1.0.3 build 20210505, 1.0.12 build 20210506
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| QNAP | QSS | before 1.0.3 build 20210505 | 1.0.3 build 20210505 | Patch available | CNA |
| QNAP | QSS | before 1.0.3 build 20210505 | 1.0.3 build 20210505 | Patch available | CNA |
| QNAP | QSS | before 1.0.3 build 20210505 | 1.0.3 build 20210505 | Patch available | CNA |
| QNAP | QSS | before 1.0.12 build 20210506 | 1.0.12 build 20210506 | Patch available | CNA |
- QSS VendorQNAP Affected before 1.0.3 build 20210505 Fixed in 1.0.3 build 20210505 Patch available CNA
- QSS VendorQNAP Affected before 1.0.3 build 20210505 Fixed in 1.0.3 build 20210505 Patch available CNA
- QSS VendorQNAP Affected before 1.0.3 build 20210505 Fixed in 1.0.3 build 20210505 Patch available CNA
- QSS VendorQNAP Affected before 1.0.12 build 20210506 Fixed in 1.0.12 build 20210506 Patch available CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:qnap:qss:*:*:*:*:*:*:*:* | before 1.0.3 | Vulnerable | QNAP |
| cpe:2.3:h:qnap:qsw-m2108-2c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | QNAP |
| cpe:2.3:h:qnap:qsw-m2108-2s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | QNAP |
| cpe:2.3:h:qnap:qsw-m2108r-2c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | QNAP |
| cpe:2.3:a:qnap:qss:*:*:*:*:*:*:*:* | before 1.0.12 | Vulnerable | QNAP |
| cpe:2.3:h:qnap:qsw-m408:-:*:*:*:*:*:*:* | not specified by NVD | Running on | QNAP |
- cpe:2.3:a:qnap:qss:*:*:*:*:*:*:*:* Versions before 1.0.3 Vulnerable ·QNAP
- cpe:2.3:h:qnap:qsw-m2108-2c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·QNAP
- cpe:2.3:h:qnap:qsw-m2108-2s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·QNAP
- cpe:2.3:h:qnap:qsw-m2108r-2c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·QNAP
- cpe:2.3:a:qnap:qss:*:*:*:*:*:*:*:* Versions before 1.0.12 Vulnerable ·QNAP
- cpe:2.3:h:qnap:qsw-m408:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·QNAP
Remediation
- Fix · CNA QSS (QNAP Systems Inc.) Fixed in 1.0.3 build 20210505
- Fix · CNA QSS (QNAP Systems Inc.) Fixed in 1.0.3 build 20210505
- Fix · CNA QSS (QNAP Systems Inc.) Fixed in 1.0.3 build 20210505
- Fix · CNA QSS (QNAP Systems Inc.) Fixed in 1.0.12 build 20210506
Timeline
- 2026-10-02 Threatist record created from CVE-2021-28805
- 2026-10-03 Alias added: GHSA-h3qq-3jf5-8qc6
References
More QNAP Qss vulnerabilities
- TI-2021-09793 Out-of-Bounds Read Vulnerability in QSS CVSS 3.1HIGH 7.5
Sources
- CVE-2021-28805 · CVE Program
- CVE-2021-28805 · NVD
- FIRST EPSS
- GHSA-h3qq-3jf5-8qc6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences