Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: EFM Component: Nas2dual Firmware Clear all filters
TI-2022-07807 CVE-2022-23771 · GHSA-whc8-p8h6-gp94

IPTIME NAS1DUAL CSRF Vulnerability

Priority MEDIUM 40

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00329 Published 2022-10-17 Fixed in 1.4.86 CWE-352
TI-2022-07801 CVE-2022-23765 · GHSA-qhhg-q8wp-jjvj

IPTIME NAS family CSRF vulnerability

Priority LOW 39

This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00493 Published 2022-08-17 Fixed in 1.4.86 CWE-352
TI-2021-08338 CVE-2021-26620 · GHSA-cc72-grgq-wvmx

IPTIME NAS2dual improper authentication vulnerability

Priority LOW 36

An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0135 Published 2022-03-25 Fixed in 1.4.82 CWE-287
TI-2020-06355 CVE-2020-7847 · GHSA-vwm9-4mjh-m96x

Unrestricted file upload in EFM ipTIME NAS

Priority LOW 35

The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00525 Published 2021-02-23 No fix listed CWE-434