Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for Qfinder Pro by QNAP

    CVE-2017-7633 (GCVE-0-2017-7633)

    Vulnerability from nvd – Published: 2018-03-05 17:00 – Updated: 2024-09-16 22:30
    VLAI
    Summary
    QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise the device.
    Severity
    No CVSS data available.
    CWE
    • Missing Encryption of Sensitive Data
    Assigner
    References
    Impacted products
    Vendor Product Version
    QNAP Qfinder Pro Affected: 6.1.0.0317 and earlier
    Create a notification for this product.
    Date Public
    2018-02-27 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-05T16:12:27.740Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://www.qnap.com/zh-tw/security-advisory/nas-201802-27"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Qfinder Pro",
              "vendor": "QNAP",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.1.0.0317 and earlier"
                }
              ]
            }
          ],
          "datePublic": "2018-02-27T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise the device."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Missing Encryption of Sensitive Data",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-03-05T16:57:02.000Z",
            "orgId": "2fd009eb-170a-4625-932b-17a53af1051f",
            "shortName": "qnap"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://www.qnap.com/zh-tw/security-advisory/nas-201802-27"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@qnap.com",
              "DATE_PUBLIC": "2018-02-27T00:00:00",
              "ID": "CVE-2017-7633",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Qfinder Pro",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "6.1.0.0317 and earlier"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "QNAP"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise the device."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "Missing Encryption of Sensitive Data"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.qnap.com/zh-tw/security-advisory/nas-201802-27",
                  "refsource": "CONFIRM",
                  "url": "https://www.qnap.com/zh-tw/security-advisory/nas-201802-27"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "2fd009eb-170a-4625-932b-17a53af1051f",
        "assignerShortName": "qnap",
        "cveId": "CVE-2017-7633",
        "datePublished": "2018-03-05T17:00:00.000Z",
        "dateReserved": "2017-04-10T00:00:00.000Z",
        "dateUpdated": "2024-09-16T22:30:54.342Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2017-7633 (GCVE-0-2017-7633)

    Vulnerability from cvelistv5 – Published: 2018-03-05 17:00 – Updated: 2024-09-16 22:30
    VLAI
    Summary
    QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise the device.
    Severity
    No CVSS data available.
    CWE
    • Missing Encryption of Sensitive Data
    Assigner
    References
    Impacted products
    Vendor Product Version
    QNAP Qfinder Pro Affected: 6.1.0.0317 and earlier
    Create a notification for this product.
    Date Public
    2018-02-27 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-05T16:12:27.740Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://www.qnap.com/zh-tw/security-advisory/nas-201802-27"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Qfinder Pro",
              "vendor": "QNAP",
              "versions": [
                {
                  "status": "affected",
                  "version": "6.1.0.0317 and earlier"
                }
              ]
            }
          ],
          "datePublic": "2018-02-27T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise the device."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Missing Encryption of Sensitive Data",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2018-03-05T16:57:02.000Z",
            "orgId": "2fd009eb-170a-4625-932b-17a53af1051f",
            "shortName": "qnap"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://www.qnap.com/zh-tw/security-advisory/nas-201802-27"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@qnap.com",
              "DATE_PUBLIC": "2018-02-27T00:00:00",
              "ID": "CVE-2017-7633",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Qfinder Pro",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "6.1.0.0317 and earlier"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "QNAP"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise the device."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "Missing Encryption of Sensitive Data"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://www.qnap.com/zh-tw/security-advisory/nas-201802-27",
                  "refsource": "CONFIRM",
                  "url": "https://www.qnap.com/zh-tw/security-advisory/nas-201802-27"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "2fd009eb-170a-4625-932b-17a53af1051f",
        "assignerShortName": "qnap",
        "cveId": "CVE-2017-7633",
        "datePublished": "2018-03-05T17:00:00.000Z",
        "dateReserved": "2017-04-10T00:00:00.000Z",
        "dateUpdated": "2024-09-16T22:30:54.342Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }