CVE-2021-38679

CRITICAL 9.8CVE-2021-38679 · Published 11/02/2022 · updated 17/06/2026

In short

CVE-2021-38679 is a CRITICAL (CVSS 9.8) vulnerability affecting kazoo server (qnap).
Chance of exploitation in the next 30 days (EPSS): 0.74%, higher than 54.8% of all vulnerabilities.
Fix: update to 4.11.22 or later.

Package	Affected versions	Patched versions
kazoo server qnap	`< 4.11.22`	`4.11.22`

Description

An improper authentication vulnerability has been reported to affect QNAP NAS running Kazoo Server. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Kazoo Server: Kazoo Server 4.11.22 and later

References

qnap.com/en/security-advisory/qsa-22-01 · Vendor Advisory

More vulnerabilities in kazoo server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free