← Back to browse · API

CVE-2020-2509

Severity
CRITICAL
CVSS
9.8
EPSS
0.33381
Risk score
75.88
CISA KEV
Yes
PoC
No
Published
2022-04-11
Modified
2022-04-11
First seen
2026-08-07
Aliases
EUVD-2020-22302, GHSA-77JF-5MCG-G6M9
Products
QNAP Systems Inc.:QTS unspecified <4.2.6 Build 20210327, QNAP Systems Inc.:QTS unspecified <4.3.3.1624 Build 20210416, QNAP Systems Inc.:QTS unspecified <4.3.4.1632 Build 20210324, QNAP Systems Inc.:QTS unspecified <4.3.6.1620 Build 20210322, QNAP Systems Inc.:QTS unspecified <4.5.1.1495 Build 20201123, QNAP Systems Inc.:QTS unspecified <4.5.2.1566 Build 20210202, QNAP Systems Inc.:QuTS hero unspecified <h4.5.1.1491 build 20201119, QNAP:QNAP Network-Attached Storage (NAS)
Sources
cisa.gov CVE-2020-2509
euvd EUVD-2020-22302

Description

QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution.

References