Hyper Data Protector
Monthly
QNAP Hyper Data Protector before 2.3.1.455 contains hard-coded credentials that allow remote unauthenticated attackers to gain unauthorized access to backup management functions, potentially compromising all backed-up data across the organization.
SQL injection in QNAP Hyper Data Protector allows unauthenticated remote attackers to execute unauthorized code or commands on affected QNAP NAS devices. The flaw affects versions prior to 2.2.4.1, which is the vendor-released patch. No public exploit code has been identified at time of analysis, and the EPSS score is low at 0.12%, though the vulnerability carries a high severity rating due to the potential for complete compromise of confidentiality, integrity, and availability.
QNAP Hyper Data Protector before 2.3.1.455 contains hard-coded credentials that allow remote unauthenticated attackers to gain unauthorized access to backup management functions, potentially compromising all backed-up data across the organization.
SQL injection in QNAP Hyper Data Protector allows unauthenticated remote attackers to execute unauthorized code or commands on affected QNAP NAS devices. The flaw affects versions prior to 2.2.4.1, which is the vendor-released patch. No public exploit code has been identified at time of analysis, and the EPSS score is low at 0.12%, though the vulnerability carries a high severity rating due to the potential for complete compromise of confidentiality, integrity, and availability.