CVE-2021-28801

HIGH 7.5CVE-2021-28801 · Published 11/06/2021 · updated 17/06/2026

In short

CVE-2021-28801 is a HIGH (CVSS 7.5) vulnerability affecting qss (qnap).
Chance of exploitation in the next 30 days (EPSS): 0.75%, higher than 55.0% of all vulnerabilities.
Fix: update to 1.0.2 or later.

Package	Affected versions	Patched versions
qss qnap	`< 1.0.2`	`1.0.2`

Description

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C; versions prior to 1.0.2 build 20210122 on QSW-M2108-2S; versions prior to 1.0.2 build 20210122 on QSW-M2108R-2C.

References

qnap.com/zh-tw/security-advisory/qsa-21-23 · Vendor Advisory

More vulnerabilities in qss

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free